[ 84.472876][ T40] audit: type=1400 audit(1773031081.234:117): avc: denied { transition } for pid=6137 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 84.482847][ T40] audit: type=1400 audit(1773031081.244:118): avc: denied { noatsecure } for pid=6137 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 84.494040][ T40] audit: type=1400 audit(1773031081.254:119): avc: denied { rlimitinh } for pid=6137 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 84.502322][ T40] audit: type=1400 audit(1773031081.254:120): avc: denied { siginh } for pid=6137 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 86.882492][ T1342] cfg80211: failed to load regulatory.db Warning: Permanently added '[localhost]:7933' (ED25519) to the list of known hosts. 2026/03/09 04:38:08 parsed 1 programs [ 93.952977][ T40] audit: type=1400 audit(1773031090.714:121): avc: denied { read write } for pid=6185 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 93.963261][ T40] audit: type=1400 audit(1773031090.714:122): avc: denied { open } for pid=6185 comm="syz-executor" path="/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 94.032063][ T40] audit: type=1400 audit(1773031090.794:123): avc: denied { unlink } for pid=6185 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 94.511963][ T40] audit: type=1400 audit(1773031091.274:124): avc: denied { relabelto } for pid=6188 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 95.349148][ T6185] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 98.255273][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.263348][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.277726][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.280667][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.543280][ T6217] chnl_net:caif_netlink_parms(): no params data found [ 98.625740][ T6217] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.628515][ T6217] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.631222][ T6217] bridge_slave_0: entered allmulticast mode [ 98.634504][ T6217] bridge_slave_0: entered promiscuous mode [ 98.638262][ T6217] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.640951][ T6217] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.643573][ T6217] bridge_slave_1: entered allmulticast mode [ 98.646844][ T6217] bridge_slave_1: entered promiscuous mode [ 98.670648][ T6217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.676469][ T6217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.704109][ T6217] team0: Port device team_slave_0 added [ 98.718420][ T6217] team0: Port device team_slave_1 added [ 98.754195][ T6217] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.757308][ T6217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.768303][ T6217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.777692][ T6217] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.781001][ T6217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.792756][ T6217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.850862][ T6217] hsr_slave_0: entered promiscuous mode [ 98.854767][ T6217] hsr_slave_1: entered promiscuous mode [ 99.455625][ T6217] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 99.466887][ T6217] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 99.476002][ T6217] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 99.481667][ T6217] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 99.555485][ T6217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.573474][ T6217] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.581849][ T1191] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.584436][ T1191] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.594717][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.597894][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.686145][ T40] audit: type=1400 audit(1773031096.444:125): avc: denied { sys_module } for pid=6217 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 99.783620][ T6217] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.830678][ T6217] veth0_vlan: entered promiscuous mode [ 99.840742][ T6217] veth1_vlan: entered promiscuous mode [ 99.873552][ T6217] veth0_macvtap: entered promiscuous mode [ 99.881750][ T6217] veth1_macvtap: entered promiscuous mode [ 99.903632][ T6217] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.918619][ T6217] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.930090][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.935461][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.939237][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.944474][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.044959][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.180949][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.253321][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.352139][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.754269][ T40] audit: type=1401 audit(1773031097.514:126): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 100.983856][ T5293] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 100.987958][ T5293] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 100.991660][ T5293] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 100.995636][ T5293] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 100.999259][ T5293] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 2026/03/09 04:38:18 executed programs: 0 [ 101.464425][ T63] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 101.468833][ T63] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 101.472495][ T63] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 101.476593][ T63] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 101.480688][ T63] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 101.603721][ T6348] chnl_net:caif_netlink_parms(): no params data found [ 101.696258][ T6348] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.699735][ T6348] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.703091][ T6348] bridge_slave_0: entered allmulticast mode [ 101.707835][ T6348] bridge_slave_0: entered promiscuous mode [ 101.713552][ T6348] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.716956][ T6348] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.720678][ T6348] bridge_slave_1: entered allmulticast mode [ 101.725444][ T6348] bridge_slave_1: entered promiscuous mode [ 101.761447][ T6348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.767566][ T6348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.797603][ T6348] team0: Port device team_slave_0 added [ 101.801801][ T6348] team0: Port device team_slave_1 added [ 101.820266][ T6348] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.822581][ T6348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.830927][ T6348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.836786][ T6348] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.839107][ T6348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.847463][ T6348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.877419][ T6348] hsr_slave_0: entered promiscuous mode [ 101.880301][ T6348] hsr_slave_1: entered promiscuous mode [ 101.883365][ T6348] debugfs: 'hsr0' already exists in 'hsr' [ 101.885258][ T6348] Cannot create hsr debugfs directory [ 103.326546][ T12] bridge_slave_1: left allmulticast mode [ 103.329118][ T12] bridge_slave_1: left promiscuous mode [ 103.331758][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.337458][ T12] bridge_slave_0: left allmulticast mode [ 103.341183][ T12] bridge_slave_0: left promiscuous mode [ 103.343359][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.490204][ T63] Bluetooth: hci0: command tx timeout [ 103.515556][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.521683][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.526929][ T12] bond0 (unregistering): Released all slaves [ 103.697942][ T12] hsr_slave_0: left promiscuous mode [ 103.702997][ T12] hsr_slave_1: left promiscuous mode [ 103.705335][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.708403][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.715000][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.717882][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.724124][ T12] veth1_macvtap: left promiscuous mode [ 103.726451][ T12] veth0_macvtap: left promiscuous mode [ 103.728779][ T12] veth1_vlan: left promiscuous mode [ 103.731091][ T12] veth0_vlan: left promiscuous mode [ 103.843656][ T12] team0 (unregistering): Port device team_slave_1 removed [ 103.850836][ T12] team0 (unregistering): Port device team_slave_0 removed [ 104.260061][ T6348] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 104.273426][ T6348] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 104.287658][ T6348] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 104.293733][ T6348] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 104.354736][ T6348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.374650][ T6348] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.384858][ T1250] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.388074][ T1250] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.399470][ T1191] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.402719][ T1191] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.701936][ T6348] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.762354][ T6348] veth0_vlan: entered promiscuous mode [ 104.770678][ T6348] veth1_vlan: entered promiscuous mode [ 104.801911][ T6348] veth0_macvtap: entered promiscuous mode [ 104.833923][ T6348] veth1_macvtap: entered promiscuous mode [ 104.850322][ T6348] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.862952][ T6348] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.873776][ T60] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.877491][ T60] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.881575][ T60] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.884877][ T60] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.946506][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.949984][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.974474][ T229] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.977802][ T229] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.019303][ T40] audit: type=1400 audit(1773031101.774:127): avc: denied { write } for pid=6389 comm="syz.0.17" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 105.030360][ T40] audit: type=1400 audit(1773031101.774:128): avc: denied { open } for pid=6389 comm="syz.0.17" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 105.038452][ T40] audit: type=1400 audit(1773031101.774:129): avc: denied { ioctl } for pid=6389 comm="syz.0.17" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 105.050619][ T6390] ------------[ cut here ]------------ [ 105.053074][ T6390] kvm_is_error_gpa(gpa) == kvm_is_error_hva(uhva) [ 105.053083][ T6390] WARNING: arch/x86/kvm/../../../virt/kvm/pfncache.c:267 at __kvm_gpc_refresh+0x1992/0x22c0, CPU#0: syz.0.17/6390 [ 105.059236][ T6390] Modules linked in: [ 105.060709][ T6390] CPU: 0 UID: 0 PID: 6390 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 105.064276][ T6390] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 105.068601][ T6390] RIP: 0010:__kvm_gpc_refresh+0x1992/0x22c0 [ 105.071710][ T6390] Code: 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 26 08 00 00 48 8b 04 24 31 db 48 8b a8 10 01 00 00 e9 cf f0 ff ff e8 8f 47 86 00 90 <0f> 0b 90 e9 92 f7 ff ff e8 81 47 86 00 48 85 db 0f 84 e9 ed ff ff [ 105.079788][ T6390] RSP: 0018:ffffc9000370f250 EFLAGS: 00010293 [ 105.082571][ T6390] RAX: 0000000000000000 RBX: ffffffffffffffff RCX: ffffffff81836719 [ 105.086501][ T6390] RDX: ffff88803418a4c0 RSI: ffffffff81837fd1 RDI: ffff88803418a4c0 [ 105.090517][ T6390] RBP: ffffffffffffff01 R08: 0000000000000000 R09: 0000000000000001 [ 105.093869][ T6390] R10: 0000000000000001 R11: 0000000000000001 R12: ffff888000000000 [ 105.097171][ T6390] R13: ffff888000000001 R14: ffff888000000000 R15: ffffc9000370f468 [ 105.100484][ T6390] FS: 00007fb4a497e6c0(0000) GS:ffff8880d6331000(0000) knlGS:0000000000000000 [ 105.103676][ T6390] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 105.105810][ T6390] CR2: 000055dccffea00c CR3: 0000000039576000 CR4: 0000000000352ef0 [ 105.108733][ T6390] Call Trace: [ 105.109906][ T6390] [ 105.110907][ T6390] ? find_held_lock+0x2b/0x80 [ 105.112451][ T6390] ? __pfx___mutex_lock+0x10/0x10 [ 105.114112][ T6390] ? __lock_acquire+0x4a5/0x2630 [ 105.115727][ T6390] ? __pfx___kvm_gpc_refresh+0x10/0x10 [ 105.117564][ T6390] kvm_gpc_refresh+0xc9/0x190 [ 105.119137][ T6390] kvm_xen_set_evtchn.part.0+0x168/0x230 [ 105.121055][ T6390] ? kvm_xen_set_evtchn.part.0+0x153/0x230 [ 105.122967][ T6390] kvm_xen_hvm_evtchn_send+0x22f/0x290 [ 105.124737][ T6390] ? __pfx_kvm_xen_hvm_evtchn_send+0x10/0x10 [ 105.126703][ T6390] kvm_arch_vm_ioctl+0x13ac/0x18d0 [ 105.128844][ T6390] ? __lock_acquire+0x4a5/0x2630 [ 105.131099][ T6390] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 105.133519][ T6390] ? __lock_acquire+0x4a5/0x2630 [ 105.135729][ T6390] ? __lock_acquire+0x4a5/0x2630 [ 105.137911][ T6390] ? __lock_acquire+0x4a5/0x2630 [ 105.140200][ T6390] ? __lock_acquire+0x4a5/0x2630 [ 105.142359][ T6390] ? is_bpf_text_address+0x8a/0x1a0 [ 105.144246][ T6390] ? bpf_ksym_find+0x128/0x1c0 [ 105.146162][ T6390] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 105.148641][ T6390] ? is_bpf_text_address+0x94/0x1a0 [ 105.150668][ T6390] ? kernel_text_address+0x8d/0x100 [ 105.152736][ T6390] ? __pfx_widen_string+0x10/0x10 [ 105.154684][ T6390] ? __kernel_text_address+0xd/0x30 [ 105.156680][ T6390] ? unwind_get_return_address+0x59/0xa0 [ 105.159066][ T6390] ? arch_stack_walk+0xa6/0xf0 [ 105.161211][ T6390] ? tomoyo_path_number_perm+0x46d/0x580 [ 105.163388][ T6390] ? stack_trace_save+0x8e/0xc0 [ 105.165378][ T6390] ? __pfx_stack_trace_save+0x10/0x10 [ 105.167744][ T6390] ? stack_depot_save_flags+0x27/0x9d0 [ 105.170284][ T6390] ? __lock_acquire+0x4a5/0x2630 [ 105.172422][ T6390] ? tomoyo_path_number_perm+0x46d/0x580 [ 105.174808][ T6390] ? kasan_save_stack+0x3f/0x50 [ 105.176911][ T6390] ? kasan_save_stack+0x30/0x50 [ 105.179031][ T6390] ? kasan_save_track+0x14/0x30 [ 105.181212][ T6390] ? kasan_save_free_info+0x3b/0x70 [ 105.183483][ T6390] kvm_vm_ioctl+0x1564/0x4080 [ 105.185510][ T6390] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 105.188052][ T6390] ? kasan_quarantine_put+0x104/0x240 [ 105.190763][ T6390] ? lockdep_hardirqs_on+0x78/0x100 [ 105.192713][ T6390] ? find_held_lock+0x2b/0x80 [ 105.194292][ T6390] ? tomoyo_path_number_perm+0x28f/0x580 [ 105.196130][ T6390] ? tomoyo_path_number_perm+0x28f/0x580 [ 105.198318][ T6390] ? tomoyo_path_number_perm+0x188/0x580 [ 105.200807][ T6390] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 105.203368][ T6390] ? futex_wait+0x11e/0x370 [ 105.205298][ T6390] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 105.207882][ T6390] ? do_vfs_ioctl+0x226/0x13e0 [ 105.210055][ T6390] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 105.212229][ T6390] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 105.215224][ T6390] ? __fget_files+0x215/0x3d0 [ 105.217284][ T6390] ? hook_file_ioctl_common+0x146/0x410 [ 105.219773][ T6390] ? selinux_file_ioctl+0x139/0x290 [ 105.222064][ T6390] ? selinux_file_ioctl+0xb4/0x290 [ 105.224184][ T6390] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 105.226323][ T6390] __x64_sys_ioctl+0x18e/0x210 [ 105.228373][ T6390] do_syscall_64+0x106/0xf80 [ 105.230457][ T6390] ? clear_bhb_loop+0x40/0x90 [ 105.232507][ T6390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.235061][ T6390] RIP: 0033:0x7fb4a3b9aeb9 [ 105.237015][ T6390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.245422][ T6390] RSP: 002b:00007fb4a497e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 105.249023][ T6390] RAX: ffffffffffffffda RBX: 00007fb4a3e15fa0 RCX: 00007fb4a3b9aeb9 [ 105.252654][ T6390] RDX: 0000200000000980 RSI: 00000000400caed0 RDI: 0000000000000004 [ 105.256092][ T6390] RBP: 00007fb4a3c08c1f R08: 0000000000000000 R09: 0000000000000000 [ 105.259562][ T6390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.262933][ T6390] R13: 00007fb4a3e16038 R14: 00007fb4a3e15fa0 R15: 00007ffe4fe93708 [ 105.266320][ T6390] [ 105.267554][ T6390] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 105.270694][ T6390] CPU: 0 UID: 0 PID: 6390 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 105.274579][ T6390] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 105.278919][ T6390] Call Trace: [ 105.280125][ T6390] [ 105.281428][ T6390] dump_stack_lvl+0x100/0x190 [ 105.283497][ T6390] vpanic+0x552/0x970 [ 105.285241][ T6390] ? __pfx_vpanic+0x10/0x10 [ 105.287243][ T6390] panic+0xd1/0xe0 [ 105.288907][ T6390] ? __pfx_panic+0x10/0x10 [ 105.290858][ T6390] ? check_panic_on_warn+0x1f/0x90 [ 105.293073][ T6390] check_panic_on_warn.cold+0x19/0x34 [ 105.295379][ T6390] ? __kvm_gpc_refresh+0x1992/0x22c0 [ 105.297699][ T6390] __warn.cold+0x191/0x348 [ 105.299577][ T6390] __report_bug+0x296/0x3d0 [ 105.301511][ T6390] ? __kvm_gpc_refresh+0x1992/0x22c0 [ 105.303802][ T6390] ? __pfx___report_bug+0x10/0x10 [ 105.305975][ T6390] ? add_lock_to_list+0x99/0x110 [ 105.308158][ T6390] ? lockdep_unlock+0x5a/0xc0 [ 105.310202][ T6390] ? __lock_acquire+0xd73/0x2630 [ 105.312354][ T6390] ? __kvm_gpc_refresh+0x1992/0x22c0 [ 105.314591][ T6390] report_bug+0xb2/0x220 [ 105.316341][ T6390] ? __kvm_gpc_refresh+0x1992/0x22c0 [ 105.318710][ T6390] handle_bug+0x16a/0x2a0 [ 105.320601][ T6390] exc_invalid_op+0x17/0x50 [ 105.322601][ T6390] asm_exc_invalid_op+0x1a/0x20 [ 105.324609][ T6390] RIP: 0010:__kvm_gpc_refresh+0x1992/0x22c0 [ 105.327015][ T6390] Code: 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 26 08 00 00 48 8b 04 24 31 db 48 8b a8 10 01 00 00 e9 cf f0 ff ff e8 8f 47 86 00 90 <0f> 0b 90 e9 92 f7 ff ff e8 81 47 86 00 48 85 db 0f 84 e9 ed ff ff [ 105.335115][ T6390] RSP: 0018:ffffc9000370f250 EFLAGS: 00010293 [ 105.337576][ T6390] RAX: 0000000000000000 RBX: ffffffffffffffff RCX: ffffffff81836719 [ 105.340807][ T6390] RDX: ffff88803418a4c0 RSI: ffffffff81837fd1 RDI: ffff88803418a4c0 [ 105.344177][ T6390] RBP: ffffffffffffff01 R08: 0000000000000000 R09: 0000000000000001 [ 105.347306][ T6390] R10: 0000000000000001 R11: 0000000000000001 R12: ffff888000000000 [ 105.349889][ T6390] R13: ffff888000000001 R14: ffff888000000000 R15: ffffc9000370f468 [ 105.352504][ T6390] ? __kvm_gpc_refresh+0xd9/0x22c0 [ 105.354559][ T6390] ? __kvm_gpc_refresh+0x1991/0x22c0 [ 105.356852][ T6390] ? find_held_lock+0x2b/0x80 [ 105.358950][ T6390] ? __pfx___mutex_lock+0x10/0x10 [ 105.361123][ T6390] ? __lock_acquire+0x4a5/0x2630 [ 105.363270][ T6390] ? __pfx___kvm_gpc_refresh+0x10/0x10 [ 105.365619][ T6390] kvm_gpc_refresh+0xc9/0x190 [ 105.367699][ T6390] kvm_xen_set_evtchn.part.0+0x168/0x230 [ 105.370140][ T6390] ? kvm_xen_set_evtchn.part.0+0x153/0x230 [ 105.372669][ T6390] kvm_xen_hvm_evtchn_send+0x22f/0x290 [ 105.375032][ T6390] ? __pfx_kvm_xen_hvm_evtchn_send+0x10/0x10 [ 105.377670][ T6390] kvm_arch_vm_ioctl+0x13ac/0x18d0 [ 105.379927][ T6390] ? __lock_acquire+0x4a5/0x2630 [ 105.382076][ T6390] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 105.384437][ T6390] ? __lock_acquire+0x4a5/0x2630 [ 105.386592][ T6390] ? __lock_acquire+0x4a5/0x2630 [ 105.388746][ T6390] ? __lock_acquire+0x4a5/0x2630 [ 105.390905][ T6390] ? __lock_acquire+0x4a5/0x2630 [ 105.393057][ T6390] ? is_bpf_text_address+0x8a/0x1a0 [ 105.395301][ T6390] ? bpf_ksym_find+0x128/0x1c0 [ 105.397392][ T6390] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 105.400043][ T6390] ? is_bpf_text_address+0x94/0x1a0 [ 105.402288][ T6390] ? kernel_text_address+0x8d/0x100 [ 105.404517][ T6390] ? __pfx_widen_string+0x10/0x10 [ 105.406685][ T6390] ? __kernel_text_address+0xd/0x30 [ 105.408944][ T6390] ? unwind_get_return_address+0x59/0xa0 [ 105.411434][ T6390] ? arch_stack_walk+0xa6/0xf0 [ 105.413512][ T6390] ? tomoyo_path_number_perm+0x46d/0x580 [ 105.415834][ T6390] ? stack_trace_save+0x8e/0xc0 [ 105.417961][ T6390] ? __pfx_stack_trace_save+0x10/0x10 [ 105.420309][ T6390] ? stack_depot_save_flags+0x27/0x9d0 [ 105.422677][ T6390] ? __lock_acquire+0x4a5/0x2630 [ 105.424815][ T6390] ? tomoyo_path_number_perm+0x46d/0x580 [ 105.427231][ T6390] ? kasan_save_stack+0x3f/0x50 [ 105.429329][ T6390] ? kasan_save_stack+0x30/0x50 [ 105.431435][ T6390] ? kasan_save_track+0x14/0x30 [ 105.433546][ T6390] ? kasan_save_free_info+0x3b/0x70 [ 105.435826][ T6390] kvm_vm_ioctl+0x1564/0x4080 [ 105.437941][ T6390] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 105.440136][ T6390] ? kasan_quarantine_put+0x104/0x240 [ 105.442450][ T6390] ? lockdep_hardirqs_on+0x78/0x100 [ 105.444686][ T6390] ? find_held_lock+0x2b/0x80 [ 105.446725][ T6390] ? tomoyo_path_number_perm+0x28f/0x580 [ 105.449066][ T6390] ? tomoyo_path_number_perm+0x28f/0x580 [ 105.451394][ T6390] ? tomoyo_path_number_perm+0x188/0x580 [ 105.453815][ T6390] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 105.456432][ T6390] ? futex_wait+0x11e/0x370 [ 105.458467][ T6390] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 105.460916][ T6390] ? do_vfs_ioctl+0x226/0x13e0 [ 105.462993][ T6390] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 105.465160][ T6390] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 105.468092][ T6390] ? __fget_files+0x215/0x3d0 [ 105.470138][ T6390] ? hook_file_ioctl_common+0x146/0x410 [ 105.472545][ T6390] ? selinux_file_ioctl+0x139/0x290 [ 105.474798][ T6390] ? selinux_file_ioctl+0xb4/0x290 [ 105.477033][ T6390] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 105.479236][ T6390] __x64_sys_ioctl+0x18e/0x210 [ 105.481327][ T6390] do_syscall_64+0x106/0xf80 [ 105.483361][ T6390] ? clear_bhb_loop+0x40/0x90 [ 105.485397][ T6390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.487979][ T6390] RIP: 0033:0x7fb4a3b9aeb9 [ 105.489925][ T6390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.498019][ T6390] RSP: 002b:00007fb4a497e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 105.501322][ T6390] RAX: ffffffffffffffda RBX: 00007fb4a3e15fa0 RCX: 00007fb4a3b9aeb9 [ 105.504697][ T6390] RDX: 0000200000000980 RSI: 00000000400caed0 RDI: 0000000000000004 [ 105.508097][ T6390] RBP: 00007fb4a3c08c1f R08: 0000000000000000 R09: 0000000000000000 [ 105.511481][ T6390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.514867][ T6390] R13: 00007fb4a3e16038 R14: 00007fb4a3e15fa0 R15: 00007ffe4fe93708 [ 105.518303][ T6390] [ 105.520346][ T6390] Kernel Offset: disabled [ 105.522245][ T6390] Rebooting in 86400 seconds..