[ 44.156129][ T40] audit: type=1400 audit(1763820493.791:61): avc: denied { siginh } for pid=5879 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:11311' (ED25519) to the list of known hosts. [ 49.870548][ T40] audit: type=1400 audit(1763820499.531:62): avc: denied { execute } for pid=5929 comm="sh" name="syz-execprog" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 49.877199][ T40] audit: type=1400 audit(1763820499.531:63): avc: denied { execute_no_trans } for pid=5929 comm="sh" path="/syz-execprog" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 2025/11/22 14:08:20 parsed 1 programs [ 51.036863][ T40] audit: type=1400 audit(1763820500.691:64): avc: denied { write } for pid=5929 comm="syz-execprog" path="pipe:[5891]" dev="pipefs" ino=5891 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 51.044209][ T40] audit: type=1400 audit(1763820500.691:65): avc: denied { node_bind } for pid=5929 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 52.876001][ T40] audit: type=1400 audit(1763820502.531:66): avc: denied { mounton } for pid=5941 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 52.883772][ T40] audit: type=1400 audit(1763820502.541:67): avc: denied { mount } for pid=5941 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 52.885476][ T5941] cgroup: Unknown subsys name 'net' [ 52.893555][ T40] audit: type=1400 audit(1763820502.551:68): avc: denied { unmount } for pid=5941 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 53.022812][ T5941] cgroup: Unknown subsys name 'cpuset' [ 53.026560][ T5941] cgroup: Unknown subsys name 'rlimit' [ 53.223634][ T40] audit: type=1400 audit(1763820502.881:69): avc: denied { setattr } for pid=5941 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 53.230824][ T40] audit: type=1400 audit(1763820502.881:70): avc: denied { create } for pid=5941 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 53.237215][ T40] audit: type=1400 audit(1763820502.881:71): avc: denied { write } for pid=5941 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 53.268622][ T5943] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 53.900086][ T5941] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 55.319803][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 55.319818][ T40] audit: type=1400 audit(1763820504.971:80): avc: denied { execmem } for pid=5946 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 55.328933][ T40] audit: type=1400 audit(1763820504.991:81): avc: denied { read } for pid=5947 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 55.335768][ T40] audit: type=1400 audit(1763820504.991:82): avc: denied { open } for pid=5947 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 55.343105][ T40] audit: type=1400 audit(1763820504.991:83): avc: denied { mounton } for pid=5947 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 55.399631][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.403096][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.423779][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.426386][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.432014][ T40] audit: type=1400 audit(1763820505.091:84): avc: denied { mount } for pid=5947 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 55.439021][ T40] audit: type=1400 audit(1763820505.091:85): avc: denied { mounton } for pid=5947 comm="syz-executor" path="/syzkaller.vSlUYt/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 55.448532][ T40] audit: type=1400 audit(1763820505.091:86): avc: denied { mounton } for pid=5947 comm="syz-executor" path="/syzkaller.vSlUYt/syz-tmp/newroot/proc" dev="tmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 55.457324][ T40] audit: type=1400 audit(1763820505.091:87): avc: denied { mount } for pid=5947 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 55.466331][ T40] audit: type=1400 audit(1763820505.091:88): avc: denied { mounton } for pid=5947 comm="syz-executor" path="/syzkaller.vSlUYt/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 55.476661][ T40] audit: type=1400 audit(1763820505.091:89): avc: denied { mounton } for pid=5947 comm="syz-executor" path="/syzkaller.vSlUYt/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=8248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 55.493583][ T5947] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 55.572595][ T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 55.575664][ T64] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 55.578378][ T64] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 55.584191][ T64] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 55.587565][ T64] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 57.186748][ T6007] chnl_net:caif_netlink_parms(): no params data found [ 57.272532][ T6007] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.275282][ T6007] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.277584][ T6007] bridge_slave_0: entered allmulticast mode [ 57.280379][ T6007] bridge_slave_0: entered promiscuous mode [ 57.284276][ T6007] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.286551][ T6007] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.288789][ T6007] bridge_slave_1: entered allmulticast mode [ 57.291420][ T6007] bridge_slave_1: entered promiscuous mode [ 57.319729][ T6007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.325585][ T6007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.358986][ T6007] team0: Port device team_slave_0 added [ 57.362140][ T6007] team0: Port device team_slave_1 added [ 57.395116][ T6007] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.397428][ T6007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 57.405939][ T6007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.411561][ T6007] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.413965][ T6007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 57.423820][ T6007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.463562][ T6007] hsr_slave_0: entered promiscuous mode [ 57.465813][ T6007] hsr_slave_1: entered promiscuous mode [ 57.579451][ T6007] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 57.587834][ T6007] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 57.594242][ T6007] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 57.600949][ T6007] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.666751][ T6007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.676508][ T6007] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.681457][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.683904][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.690797][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.693115][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.797914][ T6007] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.828312][ T6007] veth0_vlan: entered promiscuous mode [ 57.834091][ T6007] veth1_vlan: entered promiscuous mode [ 57.848545][ T6007] veth0_macvtap: entered promiscuous mode [ 57.853580][ T6007] veth1_macvtap: entered promiscuous mode [ 57.865432][ T6007] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.872908][ T6007] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.882358][ T46] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.885236][ T46] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.888595][ T46] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.892606][ T46] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.977420][ T62] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.037557][ T62] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.112504][ T62] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.181719][ T62] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2025/11/22 14:08:28 executed programs: 0 [ 58.595890][ T5297] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 58.598728][ T5297] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 58.601694][ T5297] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 58.604846][ T5297] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 58.607653][ T5297] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 58.703836][ T6043] chnl_net:caif_netlink_parms(): no params data found [ 58.763144][ T6043] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.765428][ T6043] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.767659][ T6043] bridge_slave_0: entered allmulticast mode [ 58.770156][ T6043] bridge_slave_0: entered promiscuous mode [ 58.774817][ T6043] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.777086][ T6043] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.779340][ T6043] bridge_slave_1: entered allmulticast mode [ 58.782544][ T6043] bridge_slave_1: entered promiscuous mode [ 58.814698][ T6043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.819163][ T6043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.849372][ T6043] team0: Port device team_slave_0 added [ 58.853382][ T6043] team0: Port device team_slave_1 added [ 58.882190][ T6043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.884341][ T6043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.892307][ T6043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.896477][ T6043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.898390][ T6043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.906598][ T6043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.965246][ T6043] hsr_slave_0: entered promiscuous mode [ 58.968307][ T6043] hsr_slave_1: entered promiscuous mode [ 58.971453][ T6043] debugfs: 'hsr0' already exists in 'hsr' [ 58.973855][ T6043] Cannot create hsr debugfs directory [ 60.681352][ T5297] Bluetooth: hci0: command tx timeout [ 61.162438][ T62] bridge_slave_1: left allmulticast mode [ 61.164269][ T62] bridge_slave_1: left promiscuous mode [ 61.166522][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.172151][ T62] bridge_slave_0: left allmulticast mode [ 61.174622][ T62] bridge_slave_0: left promiscuous mode [ 61.177154][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.373364][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 61.378031][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 61.381882][ T62] bond0 (unregistering): Released all slaves [ 61.403396][ T40] kauditd_printk_skb: 21 callbacks suppressed [ 61.403406][ T40] audit: type=1400 audit(1763820511.061:111): avc: denied { search } for pid=5648 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.411632][ T40] audit: type=1400 audit(1763820511.061:112): avc: denied { search } for pid=5648 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.417987][ T40] audit: type=1400 audit(1763820511.061:113): avc: denied { search } for pid=5648 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.447496][ T40] audit: type=1400 audit(1763820511.101:114): avc: denied { read open } for pid=6056 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.455192][ T40] audit: type=1400 audit(1763820511.101:115): avc: denied { getattr } for pid=6056 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.462983][ T40] audit: type=1400 audit(1763820511.111:116): avc: denied { add_name } for pid=6055 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.487430][ T62] hsr_slave_0: left promiscuous mode [ 61.490508][ T62] hsr_slave_1: left promiscuous mode [ 61.493346][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.493498][ T40] audit: type=1400 audit(1763820511.151:117): avc: denied { remove_name } for pid=6058 comm="rm" name="resolv.conf.eth2.link" dev="tmpfs" ino=2112 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.496358][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.509729][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.512807][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.525851][ T62] veth1_macvtap: left promiscuous mode [ 61.527582][ T62] veth0_macvtap: left promiscuous mode [ 61.529311][ T62] veth1_vlan: left promiscuous mode [ 61.531061][ T62] veth0_vlan: left promiscuous mode [ 61.884897][ T62] team0 (unregistering): Port device team_slave_1 removed [ 61.926866][ T62] team0 (unregistering): Port device team_slave_0 removed [ 62.611685][ T6043] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.618289][ T6043] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.624022][ T6043] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.627707][ T6043] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.668819][ T6043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.677155][ T6043] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.682865][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.685146][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.691043][ T1262] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.693150][ T1262] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.770385][ T5297] Bluetooth: hci0: command tx timeout [ 62.790592][ T6043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.857481][ T6043] veth0_vlan: entered promiscuous mode [ 62.864664][ T6043] veth1_vlan: entered promiscuous mode [ 62.877206][ T6043] veth0_macvtap: entered promiscuous mode [ 62.890589][ T6043] veth1_macvtap: entered promiscuous mode [ 62.898304][ T6043] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.912344][ T6043] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.917763][ T46] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.921196][ T46] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.926557][ T46] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.929721][ T46] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.967280][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.969758][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.983592][ T1262] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.986289][ T1262] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.019634][ T40] audit: type=1400 audit(1763820512.671:118): avc: denied { prog_load } for pid=6091 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 63.026857][ T6091] ------------[ cut here ]------------ [ 63.026866][ T6091] verifier bug: REG INVARIANTS VIOLATION (false_reg1): range bounds violation u64=[0xfffffffefffff630, 0xffffffff00000000] s64=[0xfffffffefffff630, 0xffffffff00000000] u32=[0x30, 0x8000050] s32=[0x30, 0x0] var_off=(0xfffffffe00000030, 0x10fffffc0) [ 63.026941][ T6091] WARNING: CPU: 1 PID: 6091 at kernel/bpf/verifier.c:2715 reg_bounds_sanity_check+0x62b/0x1200 [ 63.026964][ T6091] Modules linked in: [ 63.026975][ T6091] CPU: 1 UID: 0 PID: 6091 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 63.026988][ T6091] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 63.026994][ T6091] RIP: 0010:reg_bounds_sanity_check+0x62b/0x1200 [ 63.027007][ T6091] Code: 45 ac 50 8b 45 b0 50 8b 45 b4 50 ff 75 b8 4c 8b 4d c0 4c 8b 45 c8 48 8b 95 58 ff ff ff 48 8b b5 60 ff ff ff e8 c6 c6 a9 ff 90 <0f> 0b 90 90 48 8b 95 40 ff ff ff 48 83 c4 38 48 b8 00 00 00 00 00 [ 63.027017][ T6091] RSP: 0018:ffffc90003a67230 EFLAGS: 00010282 [ 63.027026][ T6091] RAX: 0000000000000000 RBX: fffffffefffff630 RCX: ffffffff817b1cd8 [ 63.027033][ T6091] RDX: ffff88803181c900 RSI: ffffffff817b1ce5 RDI: 0000000000000001 [ 63.027039][ T6091] RBP: ffffc90003a67328 R08: 0000000000000001 R09: 0000000000000000 [ 63.027045][ T6091] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888038828000 [ 63.027052][ T6091] R13: ffff88802af2f1a4 R14: ffff88802af2f19c R15: ffff88802af2f150 [ 63.027058][ T6091] FS: 000055555af8b500(0000) GS:ffff8880d6b05000(0000) knlGS:0000000000000000 [ 63.027081][ T6091] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 63.027090][ T6091] CR2: 000055a051813c48 CR3: 000000003500f000 CR4: 0000000000352ef0 [ 63.027097][ T6091] Call Trace: [ 63.027101][ T6091] [ 63.027113][ T6091] reg_set_min_max+0x1dc/0x2c0 [ 63.027127][ T6091] check_cond_jmp_op+0x19c2/0x7490 [ 63.027146][ T6091] ? __pfx_check_cond_jmp_op+0x10/0x10 [ 63.030789][ T40] audit: type=1400 audit(1763820512.671:119): avc: denied { bpf } for pid=6091 comm="syz.0.17" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 63.036662][ T6091] ? commit_stack_write_marks.isra.0+0x2fb/0x450 [ 63.039715][ T40] audit: type=1400 audit(1763820512.671:120): avc: denied { perfmon } for pid=6091 comm="syz.0.17" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 63.041168][ T6091] do_check_common+0xa20a/0xb550 [ 63.104738][ T6091] ? compute_live_registers+0x740/0x1020 [ 63.107116][ T6091] ? rcu_is_watching+0x12/0xc0 [ 63.109160][ T6091] ? __pfx_do_check_common+0x10/0x10 [ 63.111774][ T6091] ? lockdep_hardirqs_on+0x7c/0x110 [ 63.113998][ T6091] ? bpf_check+0x7fae/0xb710 [ 63.115955][ T6091] bpf_check+0x8375/0xb710 [ 63.117804][ T6091] ? __pfx_bpf_check+0x10/0x10 [ 63.119795][ T6091] ? rcu_is_watching+0x12/0xc0 [ 63.121923][ T6091] ? trace_kmalloc+0x2b/0xd0 [ 63.123671][ T6091] ? __kmalloc_noprof+0x34f/0x880 [ 63.125326][ T6091] ? lsm_blob_alloc+0x68/0x90 [ 63.126879][ T6091] ? lsm_blob_alloc+0x68/0x90 [ 63.128385][ T6091] ? __asan_memset+0x23/0x50 [ 63.129849][ T6091] ? selinux_bpf_prog_load+0x68/0x170 [ 63.131693][ T6091] ? bpf_lsm_bpf_prog_load+0x9/0x10 [ 63.133413][ T6091] bpf_prog_load+0x112e/0x2850 [ 63.134975][ T6091] ? __pfx_bpf_prog_load+0x10/0x10 [ 63.136592][ T6091] ? avc_has_perm+0x1c0/0x1f0 [ 63.138142][ T6091] ? avc_has_perm+0x144/0x1f0 [ 63.139688][ T6091] ? selinux_bpf+0xde/0x130 [ 63.141226][ T6091] ? bpf_lsm_bpf+0x9/0x10 [ 63.142611][ T6091] __sys_bpf+0x3e72/0x4980 [ 63.144014][ T6091] ? __pfx___sys_bpf+0x10/0x10 [ 63.145557][ T6091] ? __lock_acquire+0x622/0x1c90 [ 63.147153][ T6091] ? css_rstat_updated+0x1c2/0x510 [ 63.148727][ T6091] ? __pfx_css_rstat_updated+0x10/0x10 [ 63.150812][ T6091] ? exc_page_fault+0x64/0xc0 [ 63.152374][ T6091] ? do_user_addr_fault+0x843/0x1370 [ 63.154023][ T6091] __x64_sys_bpf+0x78/0xc0 [ 63.155444][ T6091] ? lockdep_hardirqs_on+0x7c/0x110 [ 63.157092][ T6091] do_syscall_64+0xcd/0xfa0 [ 63.158540][ T6091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.160483][ T6091] RIP: 0033:0x7f18c3f8f749 [ 63.161929][ T6091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.168042][ T6091] RSP: 002b:00007ffcde6c5a48 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 63.170816][ T6091] RAX: ffffffffffffffda RBX: 00007f18c41e5fa0 RCX: 00007f18c3f8f749 [ 63.173361][ T6091] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 63.175842][ T6091] RBP: 00007f18c4013f91 R08: 0000000000000000 R09: 0000000000000000 [ 63.178306][ T6091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 63.180879][ T6091] R13: 00007f18c41e5fa0 R14: 00007f18c41e5fa0 R15: 0000000000000003 [ 63.183348][ T6091] [ 63.184316][ T6091] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 63.186624][ T6091] CPU: 1 UID: 0 PID: 6091 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 63.189471][ T6091] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 63.192614][ T6091] Call Trace: [ 63.193590][ T6091] [ 63.194456][ T6091] dump_stack_lvl+0x3d/0x1f0 [ 63.195941][ T6091] vpanic+0x640/0x6f0 [ 63.197235][ T6091] ? reg_bounds_sanity_check+0x62b/0x1200 [ 63.199082][ T6091] panic+0xca/0xd0 [ 63.200314][ T6091] ? __pfx_panic+0x10/0x10 [ 63.201766][ T6091] ? check_panic_on_warn+0x1f/0xb0 [ 63.203412][ T6091] check_panic_on_warn+0xab/0xb0 [ 63.204986][ T6091] __warn+0xf6/0x3c0 [ 63.206249][ T6091] ? __pfx_vprintk_emit+0x10/0x10 [ 63.207868][ T6091] ? reg_bounds_sanity_check+0x62b/0x1200 [ 63.209718][ T6091] report_bug+0x3c3/0x580 [ 63.211126][ T6091] ? reg_bounds_sanity_check+0x62b/0x1200 [ 63.212935][ T6091] handle_bug+0x184/0x210 [ 63.214357][ T6091] exc_invalid_op+0x17/0x50 [ 63.215825][ T6091] asm_exc_invalid_op+0x1a/0x20 [ 63.217407][ T6091] RIP: 0010:reg_bounds_sanity_check+0x62b/0x1200 [ 63.219455][ T6091] Code: 45 ac 50 8b 45 b0 50 8b 45 b4 50 ff 75 b8 4c 8b 4d c0 4c 8b 45 c8 48 8b 95 58 ff ff ff 48 8b b5 60 ff ff ff e8 c6 c6 a9 ff 90 <0f> 0b 90 90 48 8b 95 40 ff ff ff 48 83 c4 38 48 b8 00 00 00 00 00 [ 63.225543][ T6091] RSP: 0018:ffffc90003a67230 EFLAGS: 00010282 [ 63.227483][ T6091] RAX: 0000000000000000 RBX: fffffffefffff630 RCX: ffffffff817b1cd8 [ 63.229994][ T6091] RDX: ffff88803181c900 RSI: ffffffff817b1ce5 RDI: 0000000000000001 [ 63.232294][ T6091] RBP: ffffc90003a67328 R08: 0000000000000001 R09: 0000000000000000 [ 63.234541][ T6091] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888038828000 [ 63.237077][ T6091] R13: ffff88802af2f1a4 R14: ffff88802af2f19c R15: ffff88802af2f150 [ 63.239652][ T6091] ? __warn_printk+0x198/0x350 [ 63.241176][ T6091] ? __warn_printk+0x1a5/0x350 [ 63.242711][ T6091] reg_set_min_max+0x1dc/0x2c0 [ 63.244201][ T6091] check_cond_jmp_op+0x19c2/0x7490 [ 63.245786][ T6091] ? __pfx_check_cond_jmp_op+0x10/0x10 [ 63.247486][ T6091] ? commit_stack_write_marks.isra.0+0x2fb/0x450 [ 63.249455][ T6091] do_check_common+0xa20a/0xb550 [ 63.251020][ T6091] ? compute_live_registers+0x740/0x1020 [ 63.252808][ T6091] ? rcu_is_watching+0x12/0xc0 [ 63.254322][ T6091] ? __pfx_do_check_common+0x10/0x10 [ 63.255996][ T6091] ? lockdep_hardirqs_on+0x7c/0x110 [ 63.257612][ T6091] ? bpf_check+0x7fae/0xb710 [ 63.259087][ T6091] bpf_check+0x8375/0xb710 [ 63.260518][ T6091] ? __pfx_bpf_check+0x10/0x10 [ 63.262008][ T6091] ? rcu_is_watching+0x12/0xc0 [ 63.263548][ T6091] ? trace_kmalloc+0x2b/0xd0 [ 63.265015][ T6091] ? __kmalloc_noprof+0x34f/0x880 [ 63.266636][ T6091] ? lsm_blob_alloc+0x68/0x90 [ 63.268117][ T6091] ? lsm_blob_alloc+0x68/0x90 [ 63.269594][ T6091] ? __asan_memset+0x23/0x50 [ 63.271113][ T6091] ? selinux_bpf_prog_load+0x68/0x170 [ 63.272837][ T6091] ? bpf_lsm_bpf_prog_load+0x9/0x10 [ 63.274468][ T6091] bpf_prog_load+0x112e/0x2850 [ 63.276040][ T6091] ? __pfx_bpf_prog_load+0x10/0x10 [ 63.277645][ T6091] ? avc_has_perm+0x1c0/0x1f0 [ 63.279183][ T6091] ? avc_has_perm+0x144/0x1f0 [ 63.280705][ T6091] ? selinux_bpf+0xde/0x130 [ 63.282181][ T6091] ? bpf_lsm_bpf+0x9/0x10 [ 63.283587][ T6091] __sys_bpf+0x3e72/0x4980 [ 63.285024][ T6091] ? __pfx___sys_bpf+0x10/0x10 [ 63.286606][ T6091] ? __lock_acquire+0x622/0x1c90 [ 63.288191][ T6091] ? css_rstat_updated+0x1c2/0x510 [ 63.289824][ T6091] ? __pfx_css_rstat_updated+0x10/0x10 [ 63.291575][ T6091] ? exc_page_fault+0x64/0xc0 [ 63.293099][ T6091] ? do_user_addr_fault+0x843/0x1370 [ 63.294772][ T6091] __x64_sys_bpf+0x78/0xc0 [ 63.296214][ T6091] ? lockdep_hardirqs_on+0x7c/0x110 [ 63.297904][ T6091] do_syscall_64+0xcd/0xfa0 [ 63.299436][ T6091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.301349][ T6091] RIP: 0033:0x7f18c3f8f749 [ 63.302830][ T6091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.309028][ T6091] RSP: 002b:00007ffcde6c5a48 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 63.311747][ T6091] RAX: ffffffffffffffda RBX: 00007f18c41e5fa0 RCX: 00007f18c3f8f749 [ 63.314279][ T6091] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 63.316844][ T6091] RBP: 00007f18c4013f91 R08: 0000000000000000 R09: 0000000000000000 [ 63.319425][ T6091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 63.322019][ T6091] R13: 00007f18c41e5fa0 R14: 00007f18c41e5fa0 R15: 0000000000000003 [ 63.324605][ T6091] [ 63.326189][ T6091] Kernel Offset: disabled [ 63.327627][ T6091] Rebooting in 86400 seconds..