[ 38.027752][ T42] audit: type=1400 audit(1785770328.330:116): avc: denied { siginh } for pid=5643 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.040348][ T42] audit: type=1400 audit(1785770328.380:117): avc: denied { write } for pid=5645 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 38.101211][ T42] audit: type=1400 audit(1785770328.440:118): avc: denied { write } for pid=5649 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 38.140319][ T42] audit: type=1400 audit(1785770328.480:119): avc: denied { write } for pid=5653 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 38.485914][ T42] audit: type=1400 audit(1785770328.830:120): avc: denied { write } for pid=5658 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:64568' (ED25519) to the list of known hosts. [ 43.503753][ T42] kauditd_printk_skb: 17 callbacks suppressed [ 43.503766][ T42] audit: type=1400 audit(1785770333.850:138): avc: denied { execute } for pid=5732 comm="sh" name="syz-execprog" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 43.514101][ T42] audit: type=1400 audit(1785770333.850:139): avc: denied { execute_no_trans } for pid=5732 comm="sh" path="/syz-execprog" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 2026/08/03 15:18:54 parsed 1 programs 2026/08/03 15:18:54 serving rpc on tcp://42679 [ 44.621269][ T42] audit: type=1400 audit(1785770334.960:140): avc: denied { node_bind } for pid=5732 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 44.629629][ T42] audit: type=1400 audit(1785770334.970:141): avc: denied { node_bind } for pid=5732 comm="syz-execprog" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 46.823515][ T42] audit: type=1400 audit(1785770337.170:142): avc: denied { mounton } for pid=5742 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 46.831422][ T42] audit: type=1400 audit(1785770337.170:143): avc: denied { mount } for pid=5742 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 46.834357][ T5742] cgroup: Unknown subsys name 'net' [ 46.844420][ T42] audit: type=1400 audit(1785770337.190:144): avc: denied { unmount } for pid=5742 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 47.016456][ T5742] cgroup: Unknown subsys name 'cpuset' [ 47.023329][ T5742] cgroup: Unknown subsys name 'rlimit' [ 47.219510][ T42] audit: type=1400 audit(1785770337.560:145): avc: denied { setattr } for pid=5742 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 47.226841][ T42] audit: type=1400 audit(1785770337.560:146): avc: denied { create } for pid=5742 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 47.233084][ T42] audit: type=1400 audit(1785770337.560:147): avc: denied { write } for pid=5742 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 47.275023][ T5745] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 48.093002][ T5742] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 49.924896][ T42] kauditd_printk_skb: 11 callbacks suppressed [ 49.924915][ T42] audit: type=1400 audit(1785770340.270:159): avc: denied { execmem } for pid=5749 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 49.981388][ T42] audit: type=1400 audit(1785770340.320:160): avc: denied { read } for pid=5750 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 49.988169][ T42] audit: type=1400 audit(1785770340.320:161): avc: denied { open } for pid=5750 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 49.995366][ T42] audit: type=1400 audit(1785770340.330:162): avc: denied { mounton } for pid=5750 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 50.052093][ T42] audit: type=1400 audit(1785770340.390:163): avc: denied { mount } for pid=5750 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 50.058857][ T42] audit: type=1400 audit(1785770340.400:164): avc: denied { mounton } for pid=5750 comm="syz-executor" path="/syzkaller.5Uk6bu/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 50.067780][ T42] audit: type=1400 audit(1785770340.400:165): avc: denied { mount } for pid=5750 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 50.075305][ T42] audit: type=1400 audit(1785770340.400:166): avc: denied { mounton } for pid=5750 comm="syz-executor" path="/syzkaller.5Uk6bu/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 50.085823][ T42] audit: type=1400 audit(1785770340.400:167): avc: denied { mounton } for pid=5750 comm="syz-executor" path="/syzkaller.5Uk6bu/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=1771 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 50.096972][ T42] audit: type=1400 audit(1785770340.410:168): avc: denied { unmount } for pid=5750 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 50.107987][ T5750] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 50.836533][ T5766] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.839287][ T5766] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.841432][ T5766] bridge_slave_0: entered allmulticast mode [ 50.844183][ T5766] bridge_slave_0: entered promiscuous mode [ 50.848571][ T5766] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.851757][ T5766] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.854769][ T5766] bridge_slave_1: entered allmulticast mode [ 50.858554][ T5766] bridge_slave_1: entered promiscuous mode [ 50.898985][ T5766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.903343][ T5766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.917792][ T5766] team0: Port device team_slave_0 added [ 50.921190][ T5766] team0: Port device team_slave_1 added [ 50.944149][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.947102][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.956569][ T5766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.961901][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.963994][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.975202][ T5766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.008136][ T5766] hsr_slave_0: entered promiscuous mode [ 51.010472][ T5766] hsr_slave_1: entered promiscuous mode [ 51.150892][ T5766] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 51.162482][ T5766] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 51.166117][ T5766] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 51.173013][ T5766] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 51.176654][ T5766] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 51.182483][ T5766] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 51.186954][ T5766] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 51.191013][ T5766] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 51.216400][ T5766] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.219556][ T5766] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.223054][ T5766] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.225762][ T5766] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.276965][ T5766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.291136][ T232] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.294241][ T232] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.307261][ T5766] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.315948][ T232] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.318331][ T232] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.326125][ T232] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.329113][ T232] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.614355][ T5766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.642155][ T5766] veth0_vlan: entered promiscuous mode [ 51.648210][ T5766] veth1_vlan: entered promiscuous mode [ 51.670107][ T5766] veth0_macvtap: entered promiscuous mode [ 51.677022][ T5766] veth1_macvtap: entered promiscuous mode [ 51.695300][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.705565][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.782089][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.788168][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.790807][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.793713][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.810897][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.898244][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.927735][ T232] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.930651][ T232] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.953990][ T227] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.956765][ T227] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.986161][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.063517][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.131610][ T5818] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 52.137515][ T5818] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 52.141012][ T5818] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 52.144982][ T5818] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 52.148574][ T5818] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 2026/08/03 15:19:04 executed programs: 0 [ 53.738056][ T5818] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 53.742244][ T5818] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.745786][ T5818] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 53.749085][ T5818] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.752121][ T5818] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 54.078793][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.081074][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.083581][ T5864] bridge_slave_0: entered allmulticast mode [ 54.086369][ T5864] bridge_slave_0: entered promiscuous mode [ 54.089823][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.092145][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.094438][ T5864] bridge_slave_1: entered allmulticast mode [ 54.097551][ T5864] bridge_slave_1: entered promiscuous mode [ 54.113430][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.118327][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.138536][ T5864] team0: Port device team_slave_0 added [ 54.142298][ T5864] team0: Port device team_slave_1 added [ 54.157368][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.159794][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.168115][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.172822][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.174916][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.183518][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.211173][ T5864] hsr_slave_0: entered promiscuous mode [ 54.214719][ T5864] hsr_slave_1: entered promiscuous mode [ 54.216756][ T5864] debugfs: 'hsr0' already exists in 'hsr' [ 54.218536][ T5864] Cannot create hsr debugfs directory [ 55.111486][ T13] bridge_slave_1: left allmulticast mode [ 55.114093][ T13] bridge_slave_1: left promiscuous mode [ 55.117052][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.124995][ T13] bridge_slave_0: left allmulticast mode [ 55.127267][ T13] bridge_slave_0: left promiscuous mode [ 55.129603][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.272563][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 55.278683][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 55.284419][ T13] bond0 (unregistering): Released all slaves [ 55.390755][ T42] kauditd_printk_skb: 20 callbacks suppressed [ 55.390774][ T42] audit: type=1400 audit(1785770345.730:189): avc: denied { write } for pid=5882 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.403722][ T42] audit: type=1400 audit(1785770345.730:190): avc: denied { create } for pid=5882 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 55.412529][ T42] audit: type=1400 audit(1785770345.730:191): avc: denied { write } for pid=5882 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth2.link" dev="tmpfs" ino=2028 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 55.422724][ T42] audit: type=1400 audit(1785770345.730:192): avc: denied { append } for pid=5882 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" dev="tmpfs" ino=2028 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 55.432033][ T42] audit: type=1400 audit(1785770345.770:193): avc: denied { write } for pid=5885 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.440343][ T42] audit: type=1400 audit(1785770345.770:194): avc: denied { unlink } for pid=5885 comm="rm" name="resolv.conf.eth2.link" dev="tmpfs" ino=2028 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 55.450793][ T13] hsr_slave_0: left promiscuous mode [ 55.454122][ T13] hsr_slave_1: left promiscuous mode [ 55.457102][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.460148][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 55.464473][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.467434][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.479173][ T13] veth1_macvtap: left promiscuous mode [ 55.481963][ T13] veth0_macvtap: left promiscuous mode [ 55.484331][ T13] veth1_vlan: left promiscuous mode [ 55.486541][ T13] veth0_vlan: left promiscuous mode [ 55.656278][ T13] team0 (unregistering): Port device team_slave_1 removed [ 55.663704][ T13] team0 (unregistering): Port device team_slave_0 removed [ 55.770762][ T5449] 8021q: adding VLAN 0 to HW filter on device eth2 [ 55.833730][ T5096] Bluetooth: hci0: command tx timeout [ 55.847304][ T42] audit: type=1400 audit(1785770346.190:195): avc: denied { write } for pid=5888 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.901424][ T42] audit: type=1400 audit(1785770346.240:196): avc: denied { write } for pid=5891 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.009475][ T42] audit: type=1400 audit(1785770346.350:197): avc: denied { write } for pid=5894 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.059854][ T42] audit: type=1400 audit(1785770346.400:198): avc: denied { write } for pid=5897 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.184895][ T5864] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.190187][ T5864] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 56.205367][ T5864] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.209376][ T5864] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 56.212691][ T5864] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.217775][ T5864] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 56.221263][ T5864] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.227820][ T5864] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 56.303774][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.320865][ T5864] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.328785][ T232] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.331677][ T232] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.341053][ T232] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.343809][ T232] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.962660][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.985331][ T5864] veth0_vlan: entered promiscuous mode [ 56.991139][ T5864] veth1_vlan: entered promiscuous mode [ 57.030385][ T5864] veth0_macvtap: entered promiscuous mode [ 57.035875][ T5864] veth1_macvtap: entered promiscuous mode [ 57.045742][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.051863][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.139509][ T232] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.144827][ T232] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.158455][ T227] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.161481][ T227] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.161858][ T5756] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.171196][ T5756] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.202572][ T5756] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.206175][ T5756] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.226433][ C1] ------------[ cut here ]------------ [ 57.228578][ C1] (skb->_skb_refdst & ~(1UL)) && !(skb->_skb_refdst & 1UL) [ 57.228592][ C1] WARNING: ./include/linux/skbuff.h:1170 at nf_flow_offload_ip_hook+0xf6c/0x2b60, CPU#1: syz.0.17/5925 [ 57.234690][ C1] Modules linked in: [ 57.236004][ C1] CPU: 1 UID: 0 PID: 5925 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 57.238745][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.241915][ C1] RIP: 0010:nf_flow_offload_ip_hook+0xf6c/0x2b60 [ 57.243812][ C1] Code: 89 ee e8 87 4b 14 f8 48 83 fd 01 76 20 e8 dc 50 14 f8 83 e5 01 31 ff 48 89 ee e8 6f 4b 14 f8 48 85 ed 75 09 e8 c5 50 14 f8 90 <0f> 0b 90 e8 bc 50 14 f8 e8 e7 73 f7 f7 31 ff 89 c5 89 c6 e8 1c 4b [ 57.249424][ C1] RSP: 0018:ffffc900006a0798 EFLAGS: 00010246 [ 57.251319][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff89f61151 [ 57.253712][ C1] RDX: ffff88802eca4a80 RSI: ffffffff89f6115b RDI: ffff88802eca4a80 [ 57.256074][ C1] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 57.258557][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88802ef0bd18 [ 57.260952][ C1] R13: ffff888027da2900 R14: ffff8880327961c0 R15: ffff888027da2900 [ 57.263322][ C1] FS: 000055557d4c8500(0000) GS:ffff8880d5ed8000(0000) knlGS:0000000000000000 [ 57.265973][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 57.267980][ C1] CR2: 0000000000000000 CR3: 0000000030863000 CR4: 0000000000352ef0 [ 57.270337][ C1] Call Trace: [ 57.271353][ C1] [ 57.272275][ C1] ? __pfx_ipv4_dst_check+0x10/0x10 [ 57.273830][ C1] ? __pfx_nf_flow_offload_ip_hook+0x10/0x10 [ 57.275646][ C1] ? __lock_acquire+0x49f/0x1a40 [ 57.277155][ C1] ? __pfx_ip_dst_mtu_maybe_forward+0x10/0x10 [ 57.278969][ C1] ? lock_acquire+0x1b9/0x370 [ 57.280511][ C1] nf_hook_slow+0xbf/0x220 [ 57.281945][ C1] __netif_receive_skb_core.constprop.0+0x1689/0x3530 [ 57.283991][ C1] ? find_held_lock+0x2b/0x80 [ 57.285623][ C1] ? __pfx_ip_output+0x10/0x10 [ 57.287087][ C1] ? ip_forward_finish+0x1b4/0x320 [ 57.288732][ C1] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 57.290910][ C1] ? ip_forward+0xfa2/0x2690 [ 57.292359][ C1] ? __lock_acquire+0x49f/0x1a40 [ 57.293866][ C1] ? process_backlog+0x32a/0x1580 [ 57.295466][ C1] __netif_receive_skb_one_core+0xb0/0x1e0 [ 57.297168][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 57.299075][ C1] ? lock_acquire+0x1b9/0x370 [ 57.300567][ C1] ? process_backlog+0x32a/0x1580 [ 57.302140][ C1] ? process_backlog+0x32a/0x1580 [ 57.303696][ C1] __netif_receive_skb+0x1f/0x120 [ 57.305227][ C1] process_backlog+0x37a/0x1580 [ 57.306707][ C1] __napi_poll.constprop.0+0xaf/0x450 [ 57.308264][ C1] net_rx_action+0xa40/0xf20 [ 57.309691][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 57.311232][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 57.312883][ C1] ? sched_clock+0x38/0x60 [ 57.314254][ C1] ? sched_clock_cpu+0x6c/0x570 [ 57.315736][ C1] ? rcu_is_watching+0x12/0xc0 [ 57.317147][ C1] handle_softirqs+0x1ea/0x9b0 [ 57.318559][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 57.320147][ C1] ? irqtime_account_delta+0x9a/0x110 [ 57.321795][ C1] ? tun_rx_batched.isra.0+0x402/0x750 [ 57.323369][ C1] do_softirq+0xac/0xe0 [ 57.324638][ C1] [ 57.325538][ C1] [ 57.326435][ C1] __local_bh_enable_ip+0xf8/0x120 [ 57.327921][ C1] tun_rx_batched.isra.0+0x407/0x750 [ 57.329459][ C1] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 57.331179][ C1] ? tun_get_user+0x1cc8/0x3c20 [ 57.332665][ C1] tun_get_user+0x1e31/0x3c20 [ 57.334060][ C1] ? __pfx_tun_get_user+0x10/0x10 [ 57.335543][ C1] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 57.337149][ C1] ? find_held_lock+0x2b/0x80 [ 57.338529][ C1] ? tun_get+0x191/0x370 [ 57.339795][ C1] ? tun_get+0x191/0x370 [ 57.341079][ C1] tun_chr_write_iter+0xdc/0x200 [ 57.342600][ C1] vfs_write+0x6ac/0x1050 [ 57.343884][ C1] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 57.345556][ C1] ? __pfx_vfs_write+0x10/0x10 [ 57.346992][ C1] ? sock_ioctl+0x2dc/0x6b0 [ 57.348320][ C1] ? __x64_sys_futex+0x34f/0x4d0 [ 57.349788][ C1] ? __x64_sys_futex+0x358/0x4d0 [ 57.351260][ C1] ksys_write+0x12a/0x250 [ 57.352622][ C1] ? __pfx_ksys_write+0x10/0x10 [ 57.354085][ C1] do_syscall_64+0x115/0x870 [ 57.355486][ C1] ? clear_bhb_loop+0x40/0x90 [ 57.356859][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.358580][ C1] RIP: 0033:0x7fac0f15e84e [ 57.359937][ C1] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 57.365709][ C1] RSP: 002b:00007ffcf31b55e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 57.368122][ C1] RAX: ffffffffffffffda RBX: 000055557d4c8500 RCX: 00007fac0f15e84e [ 57.370631][ C1] RDX: 000000000000002a RSI: 0000200000000300 RDI: 00000000000000c8 [ 57.373046][ C1] RBP: 00007fac0f23500c R08: 0000000000000000 R09: 0000000000000000 [ 57.375463][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 57.377723][ C1] R13: 00007fac0f425fac R14: 00007fac0f425fa0 R15: 00007fac0f425fa0 [ 57.380040][ C1] [ 57.380954][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 57.383095][ C1] CPU: 1 UID: 0 PID: 5925 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 57.385699][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.388578][ C1] Call Trace: [ 57.389588][ C1] [ 57.390609][ C1] dump_stack_lvl+0x100/0x190 [ 57.392221][ C1] vpanic+0x552/0x970 [ 57.393554][ C1] ? __pfx_vpanic+0x10/0x10 [ 57.395043][ C1] panic+0xd1/0xe0 [ 57.396144][ C1] ? __pfx_panic+0x10/0x10 [ 57.397451][ C1] ? check_panic_on_warn+0x1f/0x90 [ 57.399025][ C1] check_panic_on_warn.cold+0x19/0x34 [ 57.400745][ C1] ? nf_flow_offload_ip_hook+0xf6c/0x2b60 [ 57.402498][ C1] __warn.cold+0x191/0x318 [ 57.403822][ C1] __report_bug+0x30f/0x440 [ 57.405194][ C1] ? nf_flow_offload_ip_hook+0xf6c/0x2b60 [ 57.406848][ C1] ? __pfx___report_bug+0x10/0x10 [ 57.408327][ C1] ? __pfx_flow_offload_lookup+0x10/0x10 [ 57.409995][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 57.411737][ C1] ? nf_flow_tuple_encap+0x33e/0xaf0 [ 57.413261][ C1] ? __lock_acquire+0x49f/0x1a40 [ 57.414796][ C1] ? nf_flow_offload_ip_hook+0xf6c/0x2b60 [ 57.416728][ C1] report_bug+0xb2/0x220 [ 57.417974][ C1] ? nf_flow_offload_ip_hook+0xf6c/0x2b60 [ 57.419655][ C1] handle_bug+0x16a/0x2a0 [ 57.420921][ C1] exc_invalid_op+0x17/0x50 [ 57.422222][ C1] asm_exc_invalid_op+0x1a/0x20 [ 57.423639][ C1] RIP: 0010:nf_flow_offload_ip_hook+0xf6c/0x2b60 [ 57.425493][ C1] Code: 89 ee e8 87 4b 14 f8 48 83 fd 01 76 20 e8 dc 50 14 f8 83 e5 01 31 ff 48 89 ee e8 6f 4b 14 f8 48 85 ed 75 09 e8 c5 50 14 f8 90 <0f> 0b 90 e8 bc 50 14 f8 e8 e7 73 f7 f7 31 ff 89 c5 89 c6 e8 1c 4b [ 57.431014][ C1] RSP: 0018:ffffc900006a0798 EFLAGS: 00010246 [ 57.432750][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff89f61151 [ 57.435033][ C1] RDX: ffff88802eca4a80 RSI: ffffffff89f6115b RDI: ffff88802eca4a80 [ 57.437524][ C1] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 57.439907][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88802ef0bd18 [ 57.442171][ C1] R13: ffff888027da2900 R14: ffff8880327961c0 R15: ffff888027da2900 [ 57.444506][ C1] ? nf_flow_offload_ip_hook+0xf61/0x2b60 [ 57.446210][ C1] ? nf_flow_offload_ip_hook+0xf6b/0x2b60 [ 57.447888][ C1] ? nf_flow_offload_ip_hook+0xf6b/0x2b60 [ 57.449565][ C1] ? __pfx_ipv4_dst_check+0x10/0x10 [ 57.451160][ C1] ? __pfx_nf_flow_offload_ip_hook+0x10/0x10 [ 57.452888][ C1] ? __lock_acquire+0x49f/0x1a40 [ 57.454345][ C1] ? __pfx_ip_dst_mtu_maybe_forward+0x10/0x10 [ 57.456132][ C1] ? lock_acquire+0x1b9/0x370 [ 57.457518][ C1] nf_hook_slow+0xbf/0x220 [ 57.458836][ C1] __netif_receive_skb_core.constprop.0+0x1689/0x3530 [ 57.460794][ C1] ? find_held_lock+0x2b/0x80 [ 57.462194][ C1] ? __pfx_ip_output+0x10/0x10 [ 57.463647][ C1] ? ip_forward_finish+0x1b4/0x320 [ 57.465140][ C1] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 57.467230][ C1] ? ip_forward+0xfa2/0x2690 [ 57.468597][ C1] ? __lock_acquire+0x49f/0x1a40 [ 57.470113][ C1] ? process_backlog+0x32a/0x1580 [ 57.471652][ C1] __netif_receive_skb_one_core+0xb0/0x1e0 [ 57.473359][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 57.475251][ C1] ? lock_acquire+0x1b9/0x370 [ 57.476641][ C1] ? process_backlog+0x32a/0x1580 [ 57.478113][ C1] ? process_backlog+0x32a/0x1580 [ 57.479594][ C1] __netif_receive_skb+0x1f/0x120 [ 57.481110][ C1] process_backlog+0x37a/0x1580 [ 57.482591][ C1] __napi_poll.constprop.0+0xaf/0x450 [ 57.484239][ C1] net_rx_action+0xa40/0xf20 [ 57.485695][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 57.487201][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 57.488733][ C1] ? sched_clock+0x38/0x60 [ 57.490088][ C1] ? sched_clock_cpu+0x6c/0x570 [ 57.491531][ C1] ? rcu_is_watching+0x12/0xc0 [ 57.492950][ C1] handle_softirqs+0x1ea/0x9b0 [ 57.494343][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 57.495917][ C1] ? irqtime_account_delta+0x9a/0x110 [ 57.497450][ C1] ? tun_rx_batched.isra.0+0x402/0x750 [ 57.499018][ C1] do_softirq+0xac/0xe0 [ 57.500295][ C1] [ 57.501166][ C1] [ 57.502067][ C1] __local_bh_enable_ip+0xf8/0x120 [ 57.503597][ C1] tun_rx_batched.isra.0+0x407/0x750 [ 57.505198][ C1] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 57.506935][ C1] ? tun_get_user+0x1cc8/0x3c20 [ 57.508365][ C1] tun_get_user+0x1e31/0x3c20 [ 57.509780][ C1] ? __pfx_tun_get_user+0x10/0x10 [ 57.511273][ C1] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 57.512969][ C1] ? find_held_lock+0x2b/0x80 [ 57.514478][ C1] ? tun_get+0x191/0x370 [ 57.515774][ C1] ? tun_get+0x191/0x370 [ 57.517019][ C1] tun_chr_write_iter+0xdc/0x200 [ 57.518557][ C1] vfs_write+0x6ac/0x1050 [ 57.519871][ C1] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 57.521488][ C1] ? __pfx_vfs_write+0x10/0x10 [ 57.522978][ C1] ? sock_ioctl+0x2dc/0x6b0 [ 57.524483][ C1] ? __x64_sys_futex+0x34f/0x4d0 [ 57.525986][ C1] ? __x64_sys_futex+0x358/0x4d0 [ 57.527424][ C1] ksys_write+0x12a/0x250 [ 57.528731][ C1] ? __pfx_ksys_write+0x10/0x10 [ 57.530184][ C1] do_syscall_64+0x115/0x870 [ 57.531557][ C1] ? clear_bhb_loop+0x40/0x90 [ 57.532940][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.534780][ C1] RIP: 0033:0x7fac0f15e84e [ 57.536090][ C1] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 57.541640][ C1] RSP: 002b:00007ffcf31b55e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 57.544045][ C1] RAX: ffffffffffffffda RBX: 000055557d4c8500 RCX: 00007fac0f15e84e [ 57.546342][ C1] RDX: 000000000000002a RSI: 0000200000000300 RDI: 00000000000000c8 [ 57.548780][ C1] RBP: 00007fac0f23500c R08: 0000000000000000 R09: 0000000000000000 [ 57.551298][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 57.553636][ C1] R13: 00007fac0f425fac R14: 00007fac0f425fa0 R15: 00007fac0f425fa0 [ 57.556045][ C1] [ 57.557722][ C1] Kernel Offset: disabled [ 57.559050][ C1] Rebooting in 86400 seconds..