[ 68.789220][ T44] audit: type=1400 audit(1789142425.228:209): avc: denied { transition } for pid=5960 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 68.789272][ T44] audit: type=1400 audit(1789142425.228:210): avc: denied { noatsecure } for pid=5960 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 68.789975][ T44] audit: type=1400 audit(1789142425.228:211): avc: denied { rlimitinh } for pid=5960 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 68.790588][ T44] audit: type=1400 audit(1789142425.228:212): avc: denied { siginh } for pid=5960 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 71.247811][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.247849][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.420328][ T44] audit: type=1400 audit(1789142429.858:213): avc: denied { write } for pid=5967 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.469312][ T44] audit: type=1400 audit(1789142429.908:214): avc: denied { write } for pid=5970 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.918102][ T44] audit: type=1400 audit(1789142430.358:215): avc: denied { write } for pid=5973 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.983299][ T44] audit: type=1400 audit(1789142430.418:216): avc: denied { write } for pid=5976 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.306833][ T44] audit: type=1400 audit(1789142430.748:217): avc: denied { write } for pid=5979 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.356719][ T44] audit: type=1400 audit(1789142430.798:218): avc: denied { write } for pid=5982 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.434013][ T44] audit: type=1400 audit(1789142430.868:219): avc: denied { write } for pid=5985 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.477155][ T44] audit: type=1400 audit(1789142430.918:220): avc: denied { write } for pid=5988 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:44192' (ED25519) to the list of known hosts. [ 76.372818][ T10] cfg80211: failed to load regulatory.db 2026/09/11 16:00:33 parsed 1 programs 2026/09/11 16:00:33 serving rpc on tcp://42101 [ 79.915824][ T44] audit: type=1400 audit(1789142436.358:221): avc: denied { read write } for pid=6009 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 79.915935][ T44] audit: type=1400 audit(1789142436.358:222): avc: denied { open } for pid=6009 comm="syz-executor" path="/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 79.957079][ T44] audit: type=1400 audit(1789142436.398:223): avc: denied { unlink } for pid=6009 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 80.392989][ T44] audit: type=1400 audit(1789142436.828:224): avc: denied { relabelto } for pid=6012 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 81.042988][ T6009] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.847140][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.847159][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.868296][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.868310][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.281656][ T44] audit: type=1400 audit(1789142440.718:225): avc: denied { sys_module } for pid=6060 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 84.568906][ T6060] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.568997][ T6060] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.569051][ T6060] bridge_slave_0: entered allmulticast mode [ 84.569826][ T6060] bridge_slave_0: entered promiscuous mode [ 84.571544][ T6060] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.571641][ T6060] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.571704][ T6060] bridge_slave_1: entered allmulticast mode [ 84.572702][ T6060] bridge_slave_1: entered promiscuous mode [ 84.588016][ T6060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.590568][ T6060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.608724][ T6060] team0: Port device team_slave_0 added [ 84.610267][ T6060] team0: Port device team_slave_1 added [ 84.626219][ T6060] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.626230][ T6060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.626242][ T6060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.627175][ T6060] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.627183][ T6060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.627195][ T6060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.718589][ T6060] hsr_slave_0: entered promiscuous mode [ 84.719050][ T6060] hsr_slave_1: entered promiscuous mode [ 84.830201][ T44] audit: type=1400 audit(1789142441.268:226): avc: denied { write } for pid=6076 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.898114][ T44] audit: type=1400 audit(1789142441.338:227): avc: denied { write } for pid=6079 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.987915][ T44] audit: type=1400 audit(1789142441.428:228): avc: denied { write } for pid=6082 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.039504][ T44] audit: type=1400 audit(1789142441.478:229): avc: denied { write } for pid=6085 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.110435][ T44] audit: type=1400 audit(1789142441.548:230): avc: denied { write } for pid=6087 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.151188][ T6060] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.158074][ T6060] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.158873][ T6060] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.162837][ T6060] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.163535][ T6060] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.166354][ T6060] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.166812][ T6060] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.169367][ T44] audit: type=1400 audit(1789142441.608:231): avc: denied { write } for pid=6090 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.170021][ T6060] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.216608][ T6060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.224334][ T6060] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.228570][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.228657][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.241887][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.241957][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.252933][ T44] audit: type=1400 audit(1789142441.688:232): avc: denied { write } for pid=6098 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.274040][ T6060] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.322076][ T44] audit: type=1400 audit(1789142441.758:233): avc: denied { write } for pid=6102 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.423979][ T44] audit: type=1400 audit(1789142441.858:234): avc: denied { write } for pid=6107 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.489863][ T44] audit: type=1400 audit(1789142441.928:235): avc: denied { write } for pid=6113 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.546131][ T6060] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.579334][ T6060] veth0_vlan: entered promiscuous mode [ 85.587660][ T6060] veth1_vlan: entered promiscuous mode [ 85.598882][ T44] audit: type=1400 audit(1789142442.038:236): avc: denied { write } for pid=6118 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.612524][ T6060] veth0_macvtap: entered promiscuous mode [ 85.617106][ T6060] veth1_macvtap: entered promiscuous mode [ 85.630374][ T6060] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.638732][ T6060] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.663764][ T44] audit: type=1400 audit(1789142442.098:237): avc: denied { write } for pid=6121 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.704938][ T5745] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.705924][ T5801] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.705961][ T5801] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.705990][ T5801] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.774934][ T5751] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.776831][ T5751] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.778576][ T5751] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.779161][ T5745] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.779276][ T5751] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.779689][ T5751] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.864318][ T5745] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.912591][ T5745] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.001005][ T5745] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/09/11 16:00:43 executed programs: 0 [ 87.090557][ T5751] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.092166][ T5751] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.092724][ T5751] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.093933][ T5751] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.095108][ T5751] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.510907][ T6189] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.511054][ T6189] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.511121][ T6189] bridge_slave_0: entered allmulticast mode [ 87.513303][ T6189] bridge_slave_0: entered promiscuous mode [ 87.517111][ T6189] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.517234][ T6189] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.517334][ T6189] bridge_slave_1: entered allmulticast mode [ 87.518645][ T6189] bridge_slave_1: entered promiscuous mode [ 87.543796][ T6189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.546158][ T6189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.568994][ T6189] team0: Port device team_slave_0 added [ 87.570696][ T6189] team0: Port device team_slave_1 added [ 87.584440][ T6189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.584452][ T6189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.584465][ T6189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.585332][ T6189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.585340][ T6189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.585359][ T6189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.605542][ T6189] hsr_slave_0: entered promiscuous mode [ 87.606047][ T6189] hsr_slave_1: entered promiscuous mode [ 87.606369][ T6189] debugfs: 'hsr0' already exists in 'hsr' [ 87.606381][ T6189] Cannot create hsr debugfs directory [ 88.362178][ T5745] bridge_slave_1: left allmulticast mode [ 88.362195][ T5745] bridge_slave_1: left promiscuous mode [ 88.362322][ T5745] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.365775][ T5745] bridge_slave_0: left allmulticast mode [ 88.365795][ T5745] bridge_slave_0: left promiscuous mode [ 88.365958][ T5745] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.483890][ T5745] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 88.487788][ T5745] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 88.492127][ T5745] bond0 (unregistering): Released all slaves [ 88.533908][ T5745] hsr_slave_0: left promiscuous mode [ 88.535544][ T5745] hsr_slave_1: left promiscuous mode [ 88.536205][ T5745] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.536221][ T5745] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.537828][ T5745] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.537843][ T5745] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.548188][ T5745] veth1_macvtap: left promiscuous mode [ 88.548221][ T5745] veth0_macvtap: left promiscuous mode [ 88.548317][ T5745] veth1_vlan: left promiscuous mode [ 88.548371][ T5745] veth0_vlan: left promiscuous mode [ 88.750561][ T5745] team0 (unregistering): Port device team_slave_1 removed [ 88.763333][ T5745] team0 (unregistering): Port device team_slave_0 removed [ 88.834477][ T5440] 8021q: adding VLAN 0 to HW filter on device eth2 [ 89.087737][ T6189] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.091078][ T6189] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.092025][ T6189] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.094714][ T6189] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.095468][ T6189] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.100526][ T6189] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.101306][ T6189] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.106319][ T6189] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.168179][ T5751] Bluetooth: hci0: command tx timeout [ 89.351934][ T6189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.367854][ T6189] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.372338][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.372423][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.378301][ T653] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.378386][ T653] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.702323][ T6189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.732840][ T6189] veth0_vlan: entered promiscuous mode [ 89.738604][ T6189] veth1_vlan: entered promiscuous mode [ 89.762896][ T6189] veth0_macvtap: entered promiscuous mode [ 89.766473][ T6189] veth1_macvtap: entered promiscuous mode [ 89.777285][ T6189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.782426][ T6189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.834649][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.834671][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.858022][ T653] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.858037][ T653] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.864605][ T6208] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.864915][ T6208] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.865095][ T6208] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.865124][ T6208] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.911100][ T6251] ------------[ cut here ]------------ [ 89.911113][ T6251] len > ((int)(~0U >> 1)) [ 89.911120][ T6251] WARNING: ./include/linux/skbuff.h:2864 at gre_tap_xmit+0x61e/0x700, CPU#3: syz.0.17/6251 [ 89.920234][ T6251] Modules linked in: [ 89.921900][ T6251] CPU: 3 UID: 0 PID: 6251 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 89.925733][ T6251] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 89.929933][ T6251] RIP: 0010:gre_tap_xmit+0x61e/0x700 [ 89.932161][ T6251] Code: 5c b2 f7 8b 44 24 04 48 89 df 41 29 c6 41 8d 34 2e e8 d6 3c 3e ff 48 85 c0 0f 85 e3 fb ff ff e9 af fc ff ff e8 33 5c b2 f7 90 <0f> 0b 90 e9 4d fb ff ff e8 e5 96 25 f8 e9 fa fb ff ff e8 0b 97 25 [ 89.940164][ T6251] RSP: 0018:ffffc900032ef330 EFLAGS: 00010293 [ 89.942689][ T6251] RAX: 0000000000000000 RBX: ffff88803d6ac3c0 RCX: 0000000000000200 [ 89.946074][ T6251] RDX: ffff8880329f8000 RSI: ffffffff8a59b9dd RDI: ffff8880329f8000 [ 89.949382][ T6251] RBP: 00000000ffffff40 R08: 0000000000000005 R09: 0000000000000000 [ 89.952563][ T6251] R10: 00000000ffffff40 R11: 0000000000000000 R12: ffff888055fde000 [ 89.955975][ T6251] R13: 1ffff9200065de6a R14: ffffffffffffff40 R15: ffff88803d6ac490 [ 89.959278][ T6251] FS: 00007f242c0bc6c0(0000) GS:ffff8880d5e5c000(0000) knlGS:0000000000000000 [ 89.963096][ T6251] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 89.965938][ T6251] CR2: 0000200000001040 CR3: 0000000035d56000 CR4: 0000000000352ef0 [ 89.969418][ T6251] Call Trace: [ 89.970846][ T6251] [ 89.972132][ T6251] ? __pfx_gre_tap_xmit+0x10/0x10 [ 89.974324][ T6251] __dev_direct_xmit+0x5b3/0x750 [ 89.976507][ T6251] ? __pfx___dev_direct_xmit+0x10/0x10 [ 89.978802][ T6251] ? xsk_generic_xmit+0x129e/0x44a0 [ 89.980975][ T6251] ? xsk_generic_xmit+0x129e/0x44a0 [ 89.983198][ T6251] xsk_generic_xmit+0x2267/0x44a0 [ 89.985423][ T6251] ? __pfx_xsk_generic_xmit+0x10/0x10 [ 89.987683][ T6251] ? xsk_poll+0xa6/0x840 [ 89.989471][ T6251] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 89.991940][ T6251] ? __pollwait+0x276/0x490 [ 89.993912][ T6251] xsk_poll+0x2a5/0x840 [ 89.995844][ T6251] ? __fget_files+0x21f/0x3d0 [ 89.997862][ T6251] ? __pfx_xsk_poll+0x10/0x10 [ 89.999980][ T6251] sock_poll+0x160/0x510 [ 90.001896][ T6251] ? __pfx_sock_poll+0x10/0x10 [ 90.004054][ T6251] do_select+0xd54/0x1850 [ 90.006036][ T6251] ? __pfx_do_select+0x10/0x10 [ 90.008171][ T6251] ? hrtimer_start_range_ns_common+0x78e/0x18b0 [ 90.010776][ T6251] ? __pfx___pollwait+0x10/0x10 [ 90.012863][ T6251] ? __pfx_pollwake+0x10/0x10 [ 90.014971][ T6251] ? __pfx_pollwake+0x10/0x10 [ 90.017054][ T6251] ? __pfx_pollwake+0x10/0x10 [ 90.019129][ T6251] ? __pfx_pollwake+0x10/0x10 [ 90.021188][ T6251] ? __might_fault+0xc5/0x140 [ 90.023209][ T6251] ? find_held_lock+0x2b/0x80 [ 90.025284][ T6251] ? __might_fault+0xc5/0x140 [ 90.027320][ T6251] ? __might_fault+0xc5/0x140 [ 90.029291][ T6251] ? core_sys_select+0x55b/0xbb0 [ 90.031268][ T6251] core_sys_select+0x55b/0xbb0 [ 90.033119][ T6251] ? __pfx_core_sys_select+0x10/0x10 [ 90.035358][ T6251] ? futex_wake+0x4ea/0x5e0 [ 90.037273][ T6251] ? __pfx_set_user_sigmask+0x10/0x10 [ 90.039583][ T6251] ? do_futex+0x190/0x440 [ 90.041442][ T6251] ? __pfx_do_futex+0x10/0x10 [ 90.043589][ T6251] do_pselect.constprop.0+0x238/0x270 [ 90.045599][ T6251] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 90.047787][ T6251] ? __x64_sys_futex+0x358/0x4d0 [ 90.049357][ T6251] ? xfd_validate_state+0x129/0x190 [ 90.051273][ T6251] __x64_sys_pselect6+0x149/0x1c0 [ 90.053417][ T6251] do_syscall_64+0x123/0x790 [ 90.055502][ T6251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.058145][ T6251] RIP: 0033:0x7f242b19e159 [ 90.060527][ T6251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.069319][ T6251] RSP: 002b:00007f242c0bc028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 90.073525][ T6251] RAX: ffffffffffffffda RBX: 00007f242b425fa0 RCX: 00007f242b19e159 [ 90.076950][ T6251] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000040 [ 90.080527][ T6251] RBP: 00007f242b235024 R08: 0000000000000000 R09: 0000000000000000 [ 90.084672][ T6251] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000 [ 90.088897][ T6251] R13: 00007f242b426038 R14: 00007f242b425fa0 R15: 00007fff86f887d8 [ 90.092196][ T6251] [ 90.093556][ T6251] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 90.096710][ T6251] CPU: 3 UID: 0 PID: 6251 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 90.100632][ T6251] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 90.104851][ T6251] Call Trace: [ 90.106350][ T6251] [ 90.107659][ T6251] dump_stack_lvl+0x100/0x190 [ 90.109932][ T6251] vpanic+0x553/0x970 [ 90.112088][ T6251] ? __pfx_vpanic+0x10/0x10 [ 90.114280][ T6251] panic+0xd1/0xe0 [ 90.115964][ T6251] ? __pfx_panic+0x10/0x10 [ 90.117858][ T6251] check_panic_on_warn.cold+0x19/0x34 [ 90.120062][ T6251] ? gre_tap_xmit+0x61e/0x700 [ 90.121999][ T6251] __warn.cold+0x191/0x318 [ 90.123897][ T6251] __report_bug+0x30f/0x440 [ 90.125800][ T6251] ? gre_tap_xmit+0x61e/0x700 [ 90.127932][ T6251] ? __pfx___report_bug+0x10/0x10 [ 90.130467][ T6251] ? trace_kmem_cache_alloc+0xdd/0x100 [ 90.133063][ T6251] ? __kasan_slab_alloc+0x89/0x90 [ 90.135131][ T6251] ? kmem_cache_alloc_node_noprof+0x2eb/0x6e0 [ 90.137559][ T6251] ? trace_kmem_cache_alloc+0xdd/0x100 [ 90.139727][ T6251] ? kmalloc_reserve+0x148/0x350 [ 90.141752][ T6251] ? gre_tap_xmit+0x61e/0x700 [ 90.143491][ T6251] report_bug+0xb3/0x220 [ 90.144850][ T6251] ? gre_tap_xmit+0x61e/0x700 [ 90.146745][ T6251] handle_bug+0x16a/0x2a0 [ 90.148577][ T6251] exc_invalid_op+0x17/0x50 [ 90.150800][ T6251] asm_exc_invalid_op+0x1a/0x20 [ 90.153277][ T6251] RIP: 0010:gre_tap_xmit+0x61e/0x700 [ 90.155628][ T6251] Code: 5c b2 f7 8b 44 24 04 48 89 df 41 29 c6 41 8d 34 2e e8 d6 3c 3e ff 48 85 c0 0f 85 e3 fb ff ff e9 af fc ff ff e8 33 5c b2 f7 90 <0f> 0b 90 e9 4d fb ff ff e8 e5 96 25 f8 e9 fa fb ff ff e8 0b 97 25 [ 90.163043][ T6251] RSP: 0018:ffffc900032ef330 EFLAGS: 00010293 [ 90.164999][ T6251] RAX: 0000000000000000 RBX: ffff88803d6ac3c0 RCX: 0000000000000200 [ 90.168324][ T6251] RDX: ffff8880329f8000 RSI: ffffffff8a59b9dd RDI: ffff8880329f8000 [ 90.171627][ T6251] RBP: 00000000ffffff40 R08: 0000000000000005 R09: 0000000000000000 [ 90.174951][ T6251] R10: 00000000ffffff40 R11: 0000000000000000 R12: ffff888055fde000 [ 90.178425][ T6251] R13: 1ffff9200065de6a R14: ffffffffffffff40 R15: ffff88803d6ac490 [ 90.181845][ T6251] ? gre_tap_xmit+0x61d/0x700 [ 90.183748][ T6251] ? __pfx_gre_tap_xmit+0x10/0x10 [ 90.185808][ T6251] __dev_direct_xmit+0x5b3/0x750 [ 90.187833][ T6251] ? __pfx___dev_direct_xmit+0x10/0x10 [ 90.190013][ T6251] ? xsk_generic_xmit+0x129e/0x44a0 [ 90.192186][ T6251] ? xsk_generic_xmit+0x129e/0x44a0 [ 90.194412][ T6251] xsk_generic_xmit+0x2267/0x44a0 [ 90.196554][ T6251] ? __pfx_xsk_generic_xmit+0x10/0x10 [ 90.198805][ T6251] ? xsk_poll+0xa6/0x840 [ 90.200609][ T6251] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 90.203055][ T6251] ? __pollwait+0x276/0x490 [ 90.204979][ T6251] xsk_poll+0x2a5/0x840 [ 90.206822][ T6251] ? __fget_files+0x21f/0x3d0 [ 90.208900][ T6251] ? __pfx_xsk_poll+0x10/0x10 [ 90.210963][ T6251] sock_poll+0x160/0x510 [ 90.212733][ T6251] ? __pfx_sock_poll+0x10/0x10 [ 90.214739][ T6251] do_select+0xd54/0x1850 [ 90.216601][ T6251] ? __pfx_do_select+0x10/0x10 [ 90.218618][ T6251] ? hrtimer_start_range_ns_common+0x78e/0x18b0 [ 90.221234][ T6251] ? __pfx___pollwait+0x10/0x10 [ 90.223341][ T6251] ? __pfx_pollwake+0x10/0x10 [ 90.225341][ T6251] ? __pfx_pollwake+0x10/0x10 [ 90.227368][ T6251] ? __pfx_pollwake+0x10/0x10 [ 90.229356][ T6251] ? __pfx_pollwake+0x10/0x10 [ 90.231373][ T6251] ? __might_fault+0xc5/0x140 [ 90.233311][ T6251] ? find_held_lock+0x2b/0x80 [ 90.235222][ T6251] ? __might_fault+0xc5/0x140 [ 90.237146][ T6251] ? __might_fault+0xc5/0x140 [ 90.239066][ T6251] ? core_sys_select+0x55b/0xbb0 [ 90.241069][ T6251] core_sys_select+0x55b/0xbb0 [ 90.243113][ T6251] ? __pfx_core_sys_select+0x10/0x10 [ 90.245316][ T6251] ? futex_wake+0x4ea/0x5e0 [ 90.247311][ T6251] ? __pfx_set_user_sigmask+0x10/0x10 [ 90.249557][ T6251] ? do_futex+0x190/0x440 [ 90.251342][ T6251] ? __pfx_do_futex+0x10/0x10 [ 90.253329][ T6251] do_pselect.constprop.0+0x238/0x270 [ 90.255516][ T6251] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 90.258007][ T6251] ? __x64_sys_futex+0x358/0x4d0 [ 90.260114][ T6251] ? xfd_validate_state+0x129/0x190 [ 90.262297][ T6251] __x64_sys_pselect6+0x149/0x1c0 [ 90.264430][ T6251] do_syscall_64+0x123/0x790 [ 90.266392][ T6251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.268941][ T6251] RIP: 0033:0x7f242b19e159 [ 90.270880][ T6251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.278892][ T6251] RSP: 002b:00007f242c0bc028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 90.282372][ T6251] RAX: ffffffffffffffda RBX: 00007f242b425fa0 RCX: 00007f242b19e159 [ 90.285699][ T6251] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000040 [ 90.289147][ T6251] RBP: 00007f242b235024 R08: 0000000000000000 R09: 0000000000000000 [ 90.292670][ T6251] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000 [ 90.295971][ T6251] R13: 00007f242b426038 R14: 00007f242b425fa0 R15: 00007fff86f887d8 [ 90.299279][ T6251] [ 90.301306][ T6251] Kernel Offset: disabled [ 90.303161][ T6251] Rebooting in 86400 seconds..