Warning: Permanently added '[localhost]:60668' (ED25519) to the list of known hosts. [ 49.175614][ T42] kauditd_printk_skb: 17 callbacks suppressed [ 49.175634][ T42] audit: type=1400 audit(1787076003.619:138): avc: denied { execute } for pid=5723 comm="sh" name="syz-execprog" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 49.187739][ T42] audit: type=1400 audit(1787076003.619:139): avc: denied { execute_no_trans } for pid=5723 comm="sh" path="/syz-execprog" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 2026/08/18 18:00:04 parsed 1 programs 2026/08/18 18:00:04 serving rpc on tcp://42033 [ 50.396274][ T42] audit: type=1400 audit(1787076004.839:140): avc: denied { node_bind } for pid=5723 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 50.404582][ T42] audit: type=1400 audit(1787076004.839:141): avc: denied { node_bind } for pid=5723 comm="syz-execprog" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 52.600974][ T42] audit: type=1400 audit(1787076007.039:142): avc: denied { mounton } for pid=5735 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 52.610876][ T42] audit: type=1400 audit(1787076007.049:143): avc: denied { mount } for pid=5735 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 52.612872][ T5735] cgroup: Unknown subsys name 'net' [ 52.622162][ T42] audit: type=1400 audit(1787076007.069:144): avc: denied { unmount } for pid=5735 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 52.777892][ T5735] cgroup: Unknown subsys name 'cpuset' [ 52.784842][ T5735] cgroup: Unknown subsys name 'rlimit' [ 52.973686][ T42] audit: type=1400 audit(1787076007.419:145): avc: denied { setattr } for pid=5735 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 52.981086][ T42] audit: type=1400 audit(1787076007.419:146): avc: denied { create } for pid=5735 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 52.987695][ T42] audit: type=1400 audit(1787076007.419:147): avc: denied { write } for pid=5735 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 53.023361][ T5738] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 53.784503][ T5735] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 55.500515][ T42] kauditd_printk_skb: 11 callbacks suppressed [ 55.500530][ T42] audit: type=1400 audit(1787076009.939:159): avc: denied { execmem } for pid=5740 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 55.508656][ T42] audit: type=1400 audit(1787076009.949:160): avc: denied { create } for pid=5741 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 55.515639][ T42] audit: type=1400 audit(1787076009.949:161): avc: denied { read write } for pid=5741 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 55.519555][ T5743] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 55.523842][ T42] audit: type=1400 audit(1787076009.949:162): avc: denied { open } for pid=5741 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 55.527587][ T5743] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 55.534232][ T42] audit: type=1400 audit(1787076009.959:163): avc: denied { ioctl } for pid=5741 comm="syz-executor" path="socket:[8257]" dev="sockfs" ino=8257 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 55.538103][ T5743] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 55.549198][ T5743] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 55.552846][ T5743] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 55.561239][ T42] audit: type=1400 audit(1787076009.999:164): avc: denied { read } for pid=5741 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 55.567993][ T42] audit: type=1400 audit(1787076009.999:165): avc: denied { open } for pid=5741 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 55.575445][ T42] audit: type=1400 audit(1787076010.009:166): avc: denied { mounton } for pid=5741 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 55.641299][ T42] audit: type=1400 audit(1787076010.079:167): avc: denied { mount } for pid=5741 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 55.648463][ T42] audit: type=1400 audit(1787076010.079:168): avc: denied { mounton } for pid=5741 comm="syz-executor" path="/syzkaller.qMWQY1/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 55.673465][ T5741] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 56.939935][ T100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.943443][ T100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.968845][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.972183][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.007538][ T5804] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.011366][ T5804] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.014907][ T5804] bridge_slave_0: entered allmulticast mode [ 58.019007][ T5804] bridge_slave_0: entered promiscuous mode [ 58.024866][ T5804] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.027267][ T5804] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.030056][ T5804] bridge_slave_1: entered allmulticast mode [ 58.033651][ T5804] bridge_slave_1: entered promiscuous mode [ 58.054655][ T5804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.060584][ T5804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.132166][ T5804] team0: Port device team_slave_0 added [ 58.135507][ T5804] team0: Port device team_slave_1 added [ 58.149772][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.151989][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.160863][ T5804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.168938][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.171713][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.181753][ T5804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.224004][ T5804] hsr_slave_0: entered promiscuous mode [ 58.227444][ T5804] hsr_slave_1: entered promiscuous mode [ 58.378586][ T5804] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 58.385051][ T5804] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 58.388696][ T5804] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 58.393090][ T5804] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 58.395806][ T5804] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 58.400473][ T5804] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 58.403501][ T5804] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 58.409529][ T5804] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 58.425760][ T5804] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.428335][ T5804] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.430970][ T5804] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.433276][ T5804] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.468506][ T5804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.481479][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.484708][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.492431][ T5804] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.500812][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.503328][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.510018][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.512218][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.726364][ T5804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.759736][ T5804] veth0_vlan: entered promiscuous mode [ 58.766703][ T5804] veth1_vlan: entered promiscuous mode [ 58.788245][ T5804] veth0_macvtap: entered promiscuous mode [ 58.794267][ T5804] veth1_macvtap: entered promiscuous mode [ 58.805661][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.812422][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.853873][ T5540] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.858247][ T5540] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.861785][ T5540] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.865683][ T5540] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.912406][ T5540] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.972165][ T5540] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.044783][ T5540] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.123866][ T5540] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/08/18 18:00:13 executed programs: 0 [ 59.443643][ T5743] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 59.446906][ T5743] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 59.449783][ T5743] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 59.452918][ T5743] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 59.456607][ T5743] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 59.812193][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.814663][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.817130][ T5853] bridge_slave_0: entered allmulticast mode [ 59.820383][ T5853] bridge_slave_0: entered promiscuous mode [ 59.824714][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.827177][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.829471][ T5853] bridge_slave_1: entered allmulticast mode [ 59.832159][ T5853] bridge_slave_1: entered promiscuous mode [ 59.847724][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.852197][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.875191][ T5853] team0: Port device team_slave_0 added [ 59.878516][ T5853] team0: Port device team_slave_1 added [ 59.897640][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.900324][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.909537][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.914297][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.916492][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.925402][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.962185][ T5853] hsr_slave_0: entered promiscuous mode [ 59.965353][ T5853] hsr_slave_1: entered promiscuous mode [ 59.968808][ T5853] debugfs: 'hsr0' already exists in 'hsr' [ 59.971397][ T5853] Cannot create hsr debugfs directory [ 61.534323][ T5088] Bluetooth: hci0: command tx timeout [ 61.622264][ T5540] bridge_slave_1: left allmulticast mode [ 61.625086][ T5540] bridge_slave_1: left promiscuous mode [ 61.628522][ T5540] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.636626][ T5540] bridge_slave_0: left allmulticast mode [ 61.639463][ T5540] bridge_slave_0: left promiscuous mode [ 61.642043][ T5540] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.667719][ T42] kauditd_printk_skb: 20 callbacks suppressed [ 61.667737][ T42] audit: type=1400 audit(1787076016.109:189): avc: denied { write } for pid=5872 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.681013][ T42] audit: type=1400 audit(1787076016.119:190): avc: denied { create } for pid=5872 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 61.690349][ T42] audit: type=1400 audit(1787076016.119:191): avc: denied { write } for pid=5872 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth2.link" dev="tmpfs" ino=2030 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 61.700633][ T42] audit: type=1400 audit(1787076016.119:192): avc: denied { append } for pid=5872 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" dev="tmpfs" ino=2030 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 61.735446][ T42] audit: type=1400 audit(1787076016.179:193): avc: denied { write } for pid=5875 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.742551][ T42] audit: type=1400 audit(1787076016.179:194): avc: denied { unlink } for pid=5875 comm="rm" name="resolv.conf.eth2.link" dev="tmpfs" ino=2030 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 61.799420][ T5540] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 61.815232][ T5540] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 61.820278][ T5540] bond0 (unregistering): Released all slaves [ 61.837336][ T5440] 8021q: adding VLAN 0 to HW filter on device eth2 [ 61.931204][ T42] audit: type=1400 audit(1787076016.369:195): avc: denied { write } for pid=5879 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.962240][ T5540] hsr_slave_0: left promiscuous mode [ 61.967861][ T5540] hsr_slave_1: left promiscuous mode [ 61.970954][ T5540] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.974208][ T5540] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.978319][ T5540] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.981562][ T5540] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.989283][ T42] audit: type=1400 audit(1787076016.429:196): avc: denied { write } for pid=5882 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.998601][ T5540] veth1_macvtap: left promiscuous mode [ 62.001070][ T5540] veth0_macvtap: left promiscuous mode [ 62.004580][ T5540] veth1_vlan: left promiscuous mode [ 62.007050][ T5540] veth0_vlan: left promiscuous mode [ 62.204390][ T5540] team0 (unregistering): Port device team_slave_1 removed [ 62.216117][ T5540] team0 (unregistering): Port device team_slave_0 removed [ 62.334463][ T5440] 8021q: adding VLAN 0 to HW filter on device eth3 [ 62.439563][ T42] audit: type=1400 audit(1787076016.879:197): avc: denied { write } for pid=5885 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.505519][ T42] audit: type=1400 audit(1787076016.949:198): avc: denied { write } for pid=5888 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.697199][ T5853] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.703922][ T5853] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 62.708514][ T5853] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.714783][ T5853] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 62.718552][ T5853] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.723925][ T5853] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 62.729252][ T5853] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.734039][ T5853] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 62.780964][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.795524][ T5853] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.800876][ T100] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.803962][ T100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.817922][ T100] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.821031][ T100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.202191][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.239756][ T5853] veth0_vlan: entered promiscuous mode [ 63.250579][ T5853] veth1_vlan: entered promiscuous mode [ 63.267781][ T5853] veth0_macvtap: entered promiscuous mode [ 63.273225][ T5853] veth1_macvtap: entered promiscuous mode [ 63.282819][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.295247][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.345467][ T100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.349006][ T100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.370219][ T100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.372838][ T100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.373210][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.380019][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.403183][ T5540] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.406884][ T5540] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.422684][ T5921] ------------[ cut here ]------------ [ 63.425447][ T5921] len > ((int)(~0U >> 1)) [ 63.425457][ T5921] WARNING: ./include/linux/skbuff.h:2864 at ipip_tunnel_xmit+0x3d7/0x4d0, CPU#2: syz.0.17/5921 [ 63.430692][ T5921] Modules linked in: [ 63.432035][ T5921] CPU: 2 UID: 0 PID: 5921 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 63.435334][ T5921] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 63.439004][ T5921] RIP: 0010:ipip_tunnel_xmit+0x3d7/0x4d0 [ 63.440945][ T5921] Code: 5e 41 5f e9 9b e4 7a 01 e8 16 e5 c3 f7 89 e9 4c 89 e6 48 89 df 49 8d 94 24 4c 0f 00 00 e8 81 e9 fc ff eb ca e8 fa e4 c3 f7 90 <0f> 0b 90 e9 49 fd ff ff e8 ec e4 c3 f7 44 8b 2c 24 89 ef 44 89 ee [ 63.447849][ T5921] RSP: 0018:ffffc90003a875b0 EFLAGS: 00010293 [ 63.450309][ T5921] RAX: 0000000000000000 RBX: ffff888036305cc0 RCX: ffffffff8a468db0 [ 63.453380][ T5921] RDX: ffff8880277a0000 RSI: ffffffff8a469066 RDI: ffff8880277a0000 [ 63.455940][ T5921] RBP: 00000000ffffff40 R08: 0000000000000005 R09: 0000000000000000 [ 63.458776][ T5921] R10: 00000000ffffff40 R11: 0000000000000000 R12: ffff888031798000 [ 63.461381][ T5921] R13: 0000000000000000 R14: ffff888036305d74 R15: ffffffffffffff40 [ 63.464449][ T5921] FS: 000055557354b500(0000) GS:ffff8880d5dd6000(0000) knlGS:0000000000000000 [ 63.467424][ T5921] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 63.469829][ T5921] CR2: 00002000000000c0 CR3: 000000003ce12000 CR4: 0000000000352ef0 [ 63.473105][ T5921] Call Trace: [ 63.474176][ T5921] [ 63.475130][ T5921] __dev_direct_xmit+0x5b3/0x750 [ 63.476977][ T5921] ? __pfx___dev_direct_xmit+0x10/0x10 [ 63.479121][ T5921] ? xsk_generic_xmit+0x129e/0x44a0 [ 63.481001][ T5921] ? xsk_generic_xmit+0x129e/0x44a0 [ 63.482622][ T5921] xsk_generic_xmit+0x2267/0x44a0 [ 63.484462][ T5921] ? __lock_acquire+0x49f/0x1a40 [ 63.486434][ T5921] ? __pfx_xsk_generic_xmit+0x10/0x10 [ 63.488243][ T5921] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 63.490217][ T5921] ? __pollwait+0x276/0x490 [ 63.492039][ T5921] xsk_poll+0x2a5/0x840 [ 63.493799][ T5921] ? __pfx_xsk_poll+0x10/0x10 [ 63.495293][ T5921] sock_poll+0x160/0x510 [ 63.496650][ T5921] ? __pfx_sock_poll+0x10/0x10 [ 63.498516][ T5921] do_sys_poll+0x6e5/0xe90 [ 63.500331][ T5921] ? __pfx_do_sys_poll+0x10/0x10 [ 63.501921][ T5921] ? arch_stack_walk+0xa6/0xf0 [ 63.503683][ T5921] ? kasan_save_stack+0x30/0x50 [ 63.505621][ T5921] ? kasan_save_track+0x14/0x30 [ 63.507553][ T5921] ? __pfx___pollwait+0x10/0x10 [ 63.509092][ T5921] ? __pfx_pollwake+0x10/0x10 [ 63.510772][ T5921] ? do_futex+0x190/0x440 [ 63.512516][ T5921] ? set_user_sigmask+0x1e1/0x270 [ 63.514603][ T5921] ? __pfx_set_user_sigmask+0x10/0x10 [ 63.516691][ T5921] ? fput+0x79/0x100 [ 63.517938][ T5921] __x64_sys_ppoll+0x2b5/0x350 [ 63.519532][ T5921] ? __pfx___x64_sys_ppoll+0x10/0x10 [ 63.521622][ T5921] do_syscall_64+0x115/0x870 [ 63.523345][ T5921] ? clear_bhb_loop+0x70/0xc0 [ 63.524984][ T5921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.527336][ T5921] RIP: 0033:0x7fd3cc39e0d9 [ 63.529115][ T5921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.535883][ T5921] RSP: 002b:00007ffe3ac99378 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 63.538610][ T5921] RAX: ffffffffffffffda RBX: 00007fd3cc625fa0 RCX: 00007fd3cc39e0d9 [ 63.541653][ T5921] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000800 [ 63.544653][ T5921] RBP: 00007fd3cc435024 R08: 0000000000000000 R09: 0000000000000000 [ 63.547385][ T5921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 63.550501][ T5921] R13: 00007fd3cc625fac R14: 00007fd3cc625fa0 R15: 00007fd3cc625fa0 [ 63.553102][ T5921] [ 63.554271][ T5921] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 63.557162][ T5921] CPU: 2 UID: 0 PID: 5921 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 63.560309][ T5921] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 63.564052][ T5921] Call Trace: [ 63.565403][ T5921] [ 63.566516][ T5921] dump_stack_lvl+0x100/0x190 [ 63.568016][ T5921] vpanic+0x552/0x970 [ 63.569315][ T5921] ? __pfx_vpanic+0x10/0x10 [ 63.571161][ T5921] panic+0xd1/0xe0 [ 63.572667][ T5921] ? __pfx_panic+0x10/0x10 [ 63.574366][ T5921] ? check_panic_on_warn+0x1f/0x90 [ 63.576029][ T5921] check_panic_on_warn.cold+0x19/0x34 [ 63.577942][ T5921] ? ipip_tunnel_xmit+0x3d7/0x4d0 [ 63.580005][ T5921] __warn.cold+0x191/0x318 [ 63.581786][ T5921] __report_bug+0x30f/0x440 [ 63.583244][ T5921] ? ipip_tunnel_xmit+0x3d7/0x4d0 [ 63.584939][ T5921] ? __pfx___report_bug+0x10/0x10 [ 63.586950][ T5921] ? kmalloc_reserve+0xf9/0x350 [ 63.588860][ T5921] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 63.590737][ T5921] ? skb_network_protocol+0x2ce/0x3d0 [ 63.592676][ T5921] ? ipip_tunnel_xmit+0x3d7/0x4d0 [ 63.594664][ T5921] report_bug+0xb2/0x220 [ 63.596299][ T5921] ? ipip_tunnel_xmit+0x3d7/0x4d0 [ 63.597887][ T5921] handle_bug+0x16a/0x2a0 [ 63.599439][ T5921] exc_invalid_op+0x17/0x50 [ 63.601303][ T5921] asm_exc_invalid_op+0x1a/0x20 [ 63.603172][ T5921] RIP: 0010:ipip_tunnel_xmit+0x3d7/0x4d0 [ 63.604924][ T5921] Code: 5e 41 5f e9 9b e4 7a 01 e8 16 e5 c3 f7 89 e9 4c 89 e6 48 89 df 49 8d 94 24 4c 0f 00 00 e8 81 e9 fc ff eb ca e8 fa e4 c3 f7 90 <0f> 0b 90 e9 49 fd ff ff e8 ec e4 c3 f7 44 8b 2c 24 89 ef 44 89 ee [ 63.611796][ T5921] RSP: 0018:ffffc90003a875b0 EFLAGS: 00010293 [ 63.613935][ T5921] RAX: 0000000000000000 RBX: ffff888036305cc0 RCX: ffffffff8a468db0 [ 63.617030][ T5921] RDX: ffff8880277a0000 RSI: ffffffff8a469066 RDI: ffff8880277a0000 [ 63.619567][ T5921] RBP: 00000000ffffff40 R08: 0000000000000005 R09: 0000000000000000 [ 63.622578][ T5921] R10: 00000000ffffff40 R11: 0000000000000000 R12: ffff888031798000 [ 63.625481][ T5921] R13: 0000000000000000 R14: ffff888036305d74 R15: ffffffffffffff40 [ 63.628077][ T5921] ? ipip_tunnel_xmit+0x120/0x4d0 [ 63.630109][ T5921] ? ipip_tunnel_xmit+0x3d6/0x4d0 [ 63.632111][ T5921] __dev_direct_xmit+0x5b3/0x750 [ 63.633846][ T5921] ? __pfx___dev_direct_xmit+0x10/0x10 [ 63.635616][ T5921] ? xsk_generic_xmit+0x129e/0x44a0 [ 63.637632][ T5921] ? xsk_generic_xmit+0x129e/0x44a0 [ 63.639777][ T5921] xsk_generic_xmit+0x2267/0x44a0 [ 63.641585][ T5921] ? __lock_acquire+0x49f/0x1a40 [ 63.643167][ T5921] ? __pfx_xsk_generic_xmit+0x10/0x10 [ 63.645223][ T5921] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 63.647525][ T5921] ? __pollwait+0x276/0x490 [ 63.649038][ T5921] xsk_poll+0x2a5/0x840 [ 63.650406][ T5921] ? __pfx_xsk_poll+0x10/0x10 [ 63.652240][ T5921] sock_poll+0x160/0x510 [ 63.653959][ T5921] ? __pfx_sock_poll+0x10/0x10 [ 63.655771][ T5921] do_sys_poll+0x6e5/0xe90 [ 63.657185][ T5921] ? __pfx_do_sys_poll+0x10/0x10 [ 63.658883][ T5921] ? arch_stack_walk+0xa6/0xf0 [ 63.660859][ T5921] ? kasan_save_stack+0x30/0x50 [ 63.662651][ T5921] ? kasan_save_track+0x14/0x30 [ 63.664205][ T5921] ? __pfx___pollwait+0x10/0x10 [ 63.665986][ T5921] ? __pfx_pollwake+0x10/0x10 [ 63.667882][ T5921] ? do_futex+0x190/0x440 [ 63.669546][ T5921] ? set_user_sigmask+0x1e1/0x270 [ 63.671155][ T5921] ? __pfx_set_user_sigmask+0x10/0x10 [ 63.673129][ T5921] ? fput+0x79/0x100 [ 63.674705][ T5921] __x64_sys_ppoll+0x2b5/0x350 [ 63.676540][ T5921] ? __pfx___x64_sys_ppoll+0x10/0x10 [ 63.678200][ T5921] do_syscall_64+0x115/0x870 [ 63.679866][ T5921] ? clear_bhb_loop+0x70/0xc0 [ 63.681756][ T5921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.684117][ T5921] RIP: 0033:0x7fd3cc39e0d9 [ 63.685611][ T5921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.692623][ T5921] RSP: 002b:00007ffe3ac99378 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 63.695289][ T5921] RAX: ffffffffffffffda RBX: 00007fd3cc625fa0 RCX: 00007fd3cc39e0d9 [ 63.698393][ T5921] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000800 [ 63.701088][ T5921] RBP: 00007fd3cc435024 R08: 0000000000000000 R09: 0000000000000000 [ 63.703917][ T5921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 63.706979][ T5921] R13: 00007fd3cc625fac R14: 00007fd3cc625fa0 R15: 00007fd3cc625fa0 [ 63.709452][ T5921] [ 63.711489][ T5921] Kernel Offset: disabled [ 63.713221][ T5921] Rebooting in 86400 seconds..