Warning: Permanently added '10.128.1.24' (ED25519) to the list of known hosts. 2026/08/02 15:50:51 parsed 1 programs 2026/08/02 15:50:51 serving rpc on tcp://43809 [ 133.236172][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 133.236189][ T30] audit: type=1400 audit(1785685851.408:129): avc: denied { node_bind } for pid=5633 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 135.476673][ T30] audit: type=1400 audit(1785685853.658:130): avc: denied { mounton } for pid=5640 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 135.500650][ T30] audit: type=1400 audit(1785685853.678:131): avc: denied { mount } for pid=5640 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 135.504025][ T5640] cgroup: Unknown subsys name 'net' [ 135.532650][ T30] audit: type=1400 audit(1785685853.708:132): avc: denied { unmount } for pid=5640 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 135.649299][ T5640] cgroup: Unknown subsys name 'cpuset' [ 135.657663][ T5640] cgroup: Unknown subsys name 'rlimit' [ 135.802532][ T30] audit: type=1400 audit(1785685853.978:133): avc: denied { setattr } for pid=5640 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 135.826334][ T30] audit: type=1400 audit(1785685853.978:134): avc: denied { create } for pid=5640 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 135.870869][ T30] audit: type=1400 audit(1785685853.978:135): avc: denied { write } for pid=5640 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 135.891757][ T30] audit: type=1400 audit(1785685853.978:136): avc: denied { read } for pid=5640 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 135.912947][ T30] audit: type=1400 audit(1785685853.998:137): avc: denied { mounton } for pid=5640 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 135.937899][ T30] audit: type=1400 audit(1785685854.008:138): avc: denied { mount } for pid=5640 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 135.976797][ T5644] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 136.167914][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 136.175028][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.023182][ T5640] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 138.890932][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 138.890950][ T30] audit: type=1400 audit(1785685857.068:143): avc: denied { execmem } for pid=5649 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 139.002425][ T30] audit: type=1400 audit(1785685857.168:144): avc: denied { read } for pid=5654 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 139.104768][ T30] audit: type=1400 audit(1785685857.168:145): avc: denied { open } for pid=5655 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 139.161690][ T30] audit: type=1400 audit(1785685857.168:146): avc: denied { mounton } for pid=5655 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 139.337959][ T30] audit: type=1400 audit(1785685857.518:147): avc: denied { mounton } for pid=5654 comm="syz-executor" path="/root/syzkaller.Hcjmql/syz-tmp" dev="sda1" ino=2043 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 139.384362][ T30] audit: type=1400 audit(1785685857.538:148): avc: denied { mount } for pid=5654 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 139.407500][ T30] audit: type=1400 audit(1785685857.538:149): avc: denied { mounton } for pid=5654 comm="syz-executor" path="/root/syzkaller.Hcjmql/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 139.433159][ T30] audit: type=1400 audit(1785685857.538:150): avc: denied { mount } for pid=5654 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 139.461588][ T30] audit: type=1400 audit(1785685857.548:151): avc: denied { mounton } for pid=5654 comm="syz-executor" path="/root/syzkaller.Hcjmql/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 139.473742][ T5656] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 139.506582][ T30] audit: type=1400 audit(1785685857.548:152): avc: denied { mounton } for pid=5654 comm="syz-executor" path="/root/syzkaller.Hcjmql/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=5363 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 139.827802][ T5677] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 139.838487][ T5677] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 139.847603][ T5677] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 139.859399][ T5677] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 139.867657][ T5677] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 140.938207][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.946360][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.293743][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.333346][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.068281][ T5705] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.076741][ T5705] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.084014][ T5705] bridge_slave_0: entered allmulticast mode [ 142.092002][ T5705] bridge_slave_0: entered promiscuous mode [ 142.101392][ T5705] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.108577][ T5705] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.115714][ T5705] bridge_slave_1: entered allmulticast mode [ 142.123476][ T5705] bridge_slave_1: entered promiscuous mode [ 142.144592][ T5705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.155477][ T5705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.179727][ T5705] team0: Port device team_slave_0 added [ 142.187877][ T5705] team0: Port device team_slave_1 added [ 142.206354][ T5705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.213376][ T5705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 142.239384][ T5705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.251569][ T5705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.259041][ T5705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 142.284983][ T5705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.320034][ T5705] hsr_slave_0: entered promiscuous mode [ 142.326349][ T5705] hsr_slave_1: entered promiscuous mode [ 142.433767][ T5705] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 142.445688][ T5705] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 142.454616][ T5705] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 142.464090][ T5705] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 142.471881][ T5705] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 142.481234][ T5705] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 142.489165][ T5705] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 142.498030][ T5705] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 142.560950][ T5705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.582606][ T5705] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.594509][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.602248][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.616241][ T749] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.623425][ T749] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.859314][ T5705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.898594][ T5705] veth0_vlan: entered promiscuous mode [ 142.909956][ T5705] veth1_vlan: entered promiscuous mode [ 142.936347][ T5705] veth0_macvtap: entered promiscuous mode [ 142.947953][ T5705] veth1_macvtap: entered promiscuous mode [ 142.964869][ T5705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.978534][ T5705] batman_adv: batadv0: Interface activated: batadv_slave_1 2026/08/02 15:51:01 executed programs: 0 [ 143.027282][ T749] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.056954][ T76] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.090801][ T76] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.111598][ T76] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.155489][ T5677] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 143.185145][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 143.198778][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 143.208618][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 143.217932][ T5769] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 143.227663][ T5769] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 143.240170][ T5769] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 143.242471][ T5767] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 143.249570][ T5769] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 143.263598][ T5771] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 143.263962][ T5769] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 143.271480][ T5767] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 143.287875][ T4926] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 143.296245][ T4926] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 143.307153][ T5677] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 143.325860][ T5677] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 143.337641][ T5677] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 143.337809][ T4926] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 143.353171][ T5677] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 143.363399][ T5677] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 143.371885][ T5677] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 143.371899][ T4926] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 143.388591][ T5677] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 143.401406][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 143.410406][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 143.442718][ T48] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.565098][ T48] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.672236][ T48] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.843753][ T48] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.743168][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.750419][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.757796][ T5770] bridge_slave_0: entered allmulticast mode [ 144.764614][ T5770] bridge_slave_0: entered promiscuous mode [ 144.772327][ T5765] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.779844][ T5765] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.787134][ T5765] bridge_slave_0: entered allmulticast mode [ 144.793867][ T5765] bridge_slave_0: entered promiscuous mode [ 144.823225][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.830564][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.839399][ T5770] bridge_slave_1: entered allmulticast mode [ 144.846159][ T5770] bridge_slave_1: entered promiscuous mode [ 144.853645][ T5765] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.860822][ T5765] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.868137][ T5765] bridge_slave_1: entered allmulticast mode [ 144.874893][ T5765] bridge_slave_1: entered promiscuous mode [ 144.959196][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.993734][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.001013][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.009244][ T5776] bridge_slave_0: entered allmulticast mode [ 145.015956][ T5776] bridge_slave_0: entered promiscuous mode [ 145.029305][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.040894][ T5765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.052431][ T5765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.069366][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.076589][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.083860][ T5776] bridge_slave_1: entered allmulticast mode [ 145.090968][ T5776] bridge_slave_1: entered promiscuous mode [ 145.163030][ T5770] team0: Port device team_slave_0 added [ 145.175456][ T5761] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.182867][ T5761] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.190129][ T5761] bridge_slave_0: entered allmulticast mode [ 145.198145][ T5761] bridge_slave_0: entered promiscuous mode [ 145.207034][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.219025][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.235887][ T5770] team0: Port device team_slave_1 added [ 145.244425][ T5765] team0: Port device team_slave_0 added [ 145.250786][ T5761] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.258146][ T5761] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.265324][ T5761] bridge_slave_1: entered allmulticast mode [ 145.272295][ T5761] bridge_slave_1: entered promiscuous mode [ 145.292809][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.299944][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.307472][ T5774] bridge_slave_0: entered allmulticast mode [ 145.314216][ T5774] bridge_slave_0: entered promiscuous mode [ 145.329411][ T5765] team0: Port device team_slave_1 added [ 145.357366][ T5677] Bluetooth: hci2: command tx timeout [ 145.366711][ T5767] Bluetooth: hci0: command tx timeout [ 145.368019][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.373154][ T5677] Bluetooth: hci1: command tx timeout [ 145.380249][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.392176][ T5774] bridge_slave_1: entered allmulticast mode [ 145.399154][ T5774] bridge_slave_1: entered promiscuous mode [ 145.413485][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.420642][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 145.446690][ T5677] Bluetooth: hci3: command tx timeout [ 145.447013][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.456651][ T5677] Bluetooth: hci4: command tx timeout [ 145.463650][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.475977][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 145.502239][ T5765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.516131][ T5761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.527156][ T5776] team0: Port device team_slave_0 added [ 145.546336][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.553412][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 145.579430][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.590857][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.597938][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 145.624166][ T5765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.636963][ T5761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.648462][ T5776] team0: Port device team_slave_1 added [ 145.671711][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.711360][ T5761] team0: Port device team_slave_0 added [ 145.717663][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.724658][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 145.750967][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.763113][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.770127][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 145.796116][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.809036][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.834100][ T5774] team0: Port device team_slave_0 added [ 145.841248][ T5761] team0: Port device team_slave_1 added [ 145.876314][ T5774] team0: Port device team_slave_1 added [ 145.911672][ T5761] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.918761][ T5761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 145.945233][ T5761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.975698][ T5770] hsr_slave_0: entered promiscuous mode [ 145.982024][ T5770] hsr_slave_1: entered promiscuous mode [ 145.988383][ T5770] debugfs: 'hsr0' already exists in 'hsr' [ 145.994227][ T5770] Cannot create hsr debugfs directory [ 146.027620][ T5761] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.034672][ T5761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 146.060700][ T5761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.080773][ T5765] hsr_slave_0: entered promiscuous mode [ 146.087246][ T5765] hsr_slave_1: entered promiscuous mode [ 146.093252][ T5765] debugfs: 'hsr0' already exists in 'hsr' [ 146.099211][ T5765] Cannot create hsr debugfs directory [ 146.106884][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.113942][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 146.140214][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.173922][ T5776] hsr_slave_0: entered promiscuous mode [ 146.180923][ T5776] hsr_slave_1: entered promiscuous mode [ 146.187202][ T5776] debugfs: 'hsr0' already exists in 'hsr' [ 146.192910][ T5776] Cannot create hsr debugfs directory [ 146.207731][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.214790][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 146.241141][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.312860][ T48] bridge_slave_1: left allmulticast mode [ 146.319936][ T48] bridge_slave_1: left promiscuous mode [ 146.326983][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.339438][ T48] bridge_slave_0: left allmulticast mode [ 146.345149][ T48] bridge_slave_0: left promiscuous mode [ 146.351069][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.444787][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 146.455400][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 146.467212][ T48] bond0 (unregistering): Released all slaves [ 146.483718][ T5761] hsr_slave_0: entered promiscuous mode [ 146.490780][ T5761] hsr_slave_1: entered promiscuous mode [ 146.497256][ T5761] debugfs: 'hsr0' already exists in 'hsr' [ 146.502996][ T5761] Cannot create hsr debugfs directory [ 146.624242][ T5774] hsr_slave_0: entered promiscuous mode [ 146.630436][ T5774] hsr_slave_1: entered promiscuous mode [ 146.636351][ T5774] debugfs: 'hsr0' already exists in 'hsr' [ 146.643050][ T5774] Cannot create hsr debugfs directory [ 146.659441][ T48] hsr_slave_0: left promiscuous mode [ 146.666067][ T48] hsr_slave_1: left promiscuous mode [ 146.672105][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.679620][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.688252][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.695645][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.708269][ T48] veth1_macvtap: left promiscuous mode [ 146.714347][ T48] veth0_macvtap: left promiscuous mode [ 146.720073][ T48] veth1_vlan: left promiscuous mode [ 146.725397][ T48] veth0_vlan: left promiscuous mode [ 146.854067][ T48] team0 (unregistering): Port device team_slave_1 removed [ 146.873924][ T48] team0 (unregistering): Port device team_slave_0 removed [ 147.228952][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 147.228967][ T30] audit: type=1400 audit(1785685865.408:172): avc: denied { write } for pid=5856 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 147.347947][ T30] audit: type=1400 audit(1785685865.528:173): avc: denied { write } for pid=5867 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 147.426716][ T5271] 8021q: adding VLAN 0 to HW filter on device eth1 [ 147.438154][ T5767] Bluetooth: hci0: command tx timeout [ 147.438172][ T50] Bluetooth: hci2: command tx timeout [ 147.452638][ T5677] Bluetooth: hci1: command tx timeout [ 147.480076][ T5770] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 147.494779][ T5770] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 147.516642][ T5677] Bluetooth: hci4: command tx timeout [ 147.522813][ T5767] Bluetooth: hci3: command tx timeout [ 147.571931][ T5770] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 147.580763][ T5770] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 147.591750][ T5770] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 147.605405][ T5770] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 147.633576][ T5770] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 147.665865][ T5770] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 147.831028][ T5776] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 147.845859][ T5776] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 147.886629][ T5776] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 147.895397][ T30] audit: type=1400 audit(1785685866.068:174): avc: denied { write } for pid=5870 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 147.921847][ T5776] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 147.933208][ T5776] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 147.948698][ T5776] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 147.979186][ T5776] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 147.992938][ T5776] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 148.003067][ T30] audit: type=1400 audit(1785685866.178:175): avc: denied { write } for pid=5887 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.098027][ T5271] 8021q: adding VLAN 0 to HW filter on device eth2 [ 148.120754][ T5761] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 148.132299][ T5761] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 148.150729][ T5761] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 148.159693][ T5761] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 148.183226][ T5761] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 148.198771][ T5761] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 148.218332][ T5761] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 148.229448][ T5761] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 148.271609][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.357602][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.382557][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.389791][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.458771][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.466024][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.533767][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.559812][ T30] audit: type=1400 audit(1785685866.738:176): avc: denied { write } for pid=5903 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.595573][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.623253][ T5761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.638279][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.645441][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.653731][ T30] audit: type=1400 audit(1785685866.818:177): avc: denied { write } for pid=5914 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.714637][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.721754][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.733599][ T5761] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.761086][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.768291][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.809267][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.816486][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.896422][ T5765] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 148.919670][ T5765] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 148.944003][ T5765] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 148.964556][ T5765] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 149.011792][ T5765] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 149.023515][ T5765] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 149.052347][ T5765] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 149.062955][ T5765] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 149.165983][ T30] audit: type=1400 audit(1785685867.338:178): avc: denied { write } for pid=5919 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 149.200000][ T5774] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 149.224324][ T5774] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 149.249525][ T5774] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 149.276043][ T5774] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 149.284367][ T30] audit: type=1400 audit(1785685867.448:179): avc: denied { write } for pid=5942 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 149.311577][ T5774] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 149.338478][ T5774] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 149.365949][ T5774] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 149.389744][ T5774] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 149.518240][ T5767] Bluetooth: hci2: command tx timeout [ 149.524192][ T5677] Bluetooth: hci1: command tx timeout [ 149.524204][ T50] Bluetooth: hci0: command tx timeout [ 149.598833][ T50] Bluetooth: hci3: command tx timeout [ 149.598851][ T5677] Bluetooth: hci4: command tx timeout [ 149.717839][ T5765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.785630][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.804256][ T5765] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.814183][ T30] audit: type=1400 audit(1785685867.988:180): avc: denied { write } for pid=5945 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 149.827297][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.844306][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.900139][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.924144][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.951583][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.958769][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.984727][ T30] audit: type=1400 audit(1785685868.158:181): avc: denied { write } for pid=5981 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 150.007934][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.033575][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.040753][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.078139][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.085328][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.191468][ T5770] veth0_vlan: entered promiscuous mode [ 150.201289][ T5776] veth0_vlan: entered promiscuous mode [ 150.250999][ T5770] veth1_vlan: entered promiscuous mode [ 150.272440][ T5776] veth1_vlan: entered promiscuous mode [ 150.294650][ T5761] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.424625][ T5770] veth0_macvtap: entered promiscuous mode [ 150.437794][ T5776] veth0_macvtap: entered promiscuous mode [ 150.456919][ T5776] veth1_macvtap: entered promiscuous mode [ 150.465518][ T5770] veth1_macvtap: entered promiscuous mode [ 150.554938][ T5761] veth0_vlan: entered promiscuous mode [ 150.593115][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.607552][ T5761] veth1_vlan: entered promiscuous mode [ 150.631050][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.654709][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.699873][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.739486][ T48] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.759598][ T5761] veth0_macvtap: entered promiscuous mode [ 150.790878][ T5761] veth1_macvtap: entered promiscuous mode [ 150.897213][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.938656][ T5761] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.973656][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.977708][ T5761] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.994629][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.074015][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.092892][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.130998][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.148296][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.173583][ T5765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.193184][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.204774][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/08/02 15:51:09 executed programs: 10 [ 151.272311][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.281730][ T3259] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.296293][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.359168][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.390648][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.463775][ T5765] veth0_vlan: entered promiscuous mode [ 151.516926][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.576646][ T5765] veth1_vlan: entered promiscuous mode [ 151.594412][ T3259] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.602680][ T50] Bluetooth: hci1: command tx timeout [ 151.602712][ T50] Bluetooth: hci2: command tx timeout [ 151.607077][ T5677] Bluetooth: hci0: command tx timeout [ 151.643177][ T3259] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.668773][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.677686][ T50] Bluetooth: hci4: command tx timeout [ 151.687006][ T50] Bluetooth: hci3: command tx timeout [ 151.780682][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.840610][ T5765] veth0_macvtap: entered promiscuous mode [ 151.875616][ T5765] veth1_macvtap: entered promiscuous mode [ 151.914589][ T5774] veth0_vlan: entered promiscuous mode [ 151.984350][ T5774] veth1_vlan: entered promiscuous mode [ 152.010454][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.026003][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.039986][ T112] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.050422][ T112] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.117957][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.196943][ T5774] veth0_macvtap: entered promiscuous mode [ 152.244163][ T5774] veth1_macvtap: entered promiscuous mode [ 152.257744][ T3259] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.300686][ T3259] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.314891][ T3259] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.345221][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.369732][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.416691][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.451560][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.508723][ T112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.544786][ T112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.553924][ T48] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.789810][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.834006][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.982239][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.010693][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.118435][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.149548][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.191459][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.242882][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.274950][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.316046][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 2026/08/02 15:51:14 executed programs: 89 2026/08/02 15:51:19 executed programs: 197 2026/08/02 15:51:24 executed programs: 307 [ 169.740192][ T7257] ================================================================== [ 169.748341][ T7257] BUG: KASAN: use-after-free in kvm_xen_shared_info_init+0x3c6/0x440 [ 169.756412][ T7257] Read of size 4 at addr ffff8880599c2900 by task syz.2.383/7257 [ 169.764130][ T7257] [ 169.766508][ T7257] CPU: 1 UID: 0 PID: 7257 Comm: syz.2.383 Not tainted syzkaller #0 PREEMPT(full) [ 169.766526][ T7257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 169.766539][ T7257] Call Trace: [ 169.766570][ T7257] [ 169.766576][ T7257] dump_stack_lvl+0x100/0x190 [ 169.766597][ T7257] print_report+0x13d/0x4b0 [ 169.766617][ T7257] ? __virt_addr_valid+0x239/0x430 [ 169.766635][ T7257] ? kvm_xen_shared_info_init+0x3c6/0x440 [ 169.766692][ T7257] kasan_report+0xdf/0x1c0 [ 169.766727][ T7257] ? kvm_xen_shared_info_init+0x3c6/0x440 [ 169.766745][ T7257] kvm_xen_shared_info_init+0x3c6/0x440 [ 169.766760][ T7257] kvm_xen_hvm_set_attr+0xcef/0x16a0 [ 169.766775][ T7257] ? __might_fault+0xc5/0x140 [ 169.766788][ T7257] ? __pfx_kvm_xen_hvm_set_attr+0x10/0x10 [ 169.766805][ T7257] kvm_arch_vm_ioctl+0x2a0/0x18d0 [ 169.766820][ T7257] ? __lock_acquire+0x49f/0x1a40 [ 169.766836][ T7257] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 169.766849][ T7257] ? __update_page_owner_handle+0x390/0x530 [ 169.766868][ T7257] ? __lock_acquire+0x49f/0x1a40 [ 169.766886][ T7257] ? __lock_acquire+0x49f/0x1a40 [ 169.766903][ T7257] ? __lock_acquire+0x49f/0x1a40 [ 169.766924][ T7257] ? find_held_lock+0x2b/0x80 [ 169.766935][ T7257] ? is_bpf_text_address+0x8a/0x1a0 [ 169.766954][ T7257] ? is_bpf_text_address+0x8a/0x1a0 [ 169.766971][ T7257] ? bpf_ksym_find+0x128/0x1c0 [ 169.766992][ T7257] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 169.767008][ T7257] ? is_bpf_text_address+0x94/0x1a0 [ 169.767025][ T7257] ? kernel_text_address+0x8d/0x100 [ 169.767041][ T7257] ? __pfx_widen_string+0x10/0x10 [ 169.767056][ T7257] ? __kernel_text_address+0xd/0x30 [ 169.767072][ T7257] ? unwind_get_return_address+0x59/0xa0 [ 169.767086][ T7257] ? arch_stack_walk+0xa6/0xf0 [ 169.767109][ T7257] ? tomoyo_path_number_perm+0x46d/0x580 [ 169.767162][ T7257] ? stack_trace_save+0x8e/0xc0 [ 169.767176][ T7257] ? __pfx_stack_trace_save+0x10/0x10 [ 169.767189][ T7257] ? stack_depot_save_flags+0x27/0x9d0 [ 169.767210][ T7257] ? __lock_acquire+0x49f/0x1a40 [ 169.767226][ T7257] ? tomoyo_path_number_perm+0x46d/0x580 [ 169.767247][ T7257] kvm_vm_ioctl+0x1560/0x4180 [ 169.767270][ T7257] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.767287][ T7257] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 169.767320][ T7257] ? kasan_quarantine_put+0x104/0x240 [ 169.767341][ T7257] ? lockdep_hardirqs_on+0x78/0x100 [ 169.767358][ T7257] ? find_held_lock+0x2b/0x80 [ 169.767369][ T7257] ? tomoyo_path_number_perm+0x28f/0x580 [ 169.767388][ T7257] ? tomoyo_path_number_perm+0x28f/0x580 [ 169.767409][ T7257] ? tomoyo_path_number_perm+0x188/0x580 [ 169.767429][ T7257] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 169.767452][ T7257] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 169.767470][ T7257] ? do_vfs_ioctl+0x226/0x13e0 [ 169.767492][ T7257] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 169.767512][ T7257] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 169.767538][ T7257] ? __fget_files+0x215/0x3d0 [ 169.767551][ T7257] ? hook_file_ioctl_common+0x140/0x440 [ 169.767571][ T7257] ? selinux_file_ioctl+0x13b/0x290 [ 169.767592][ T7257] ? selinux_file_ioctl+0xb6/0x290 [ 169.767612][ T7257] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 169.767633][ T7257] __x64_sys_ioctl+0x18e/0x210 [ 169.767654][ T7257] do_syscall_64+0x115/0x870 [ 169.767671][ T7257] ? clear_bhb_loop+0x40/0x90 [ 169.767687][ T7257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.767701][ T7257] RIP: 0033:0x7f03cc39e019 [ 169.767715][ T7257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.767728][ T7257] RSP: 002b:00007f03cd189028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 169.767784][ T7257] RAX: ffffffffffffffda RBX: 00007f03cc626090 RCX: 00007f03cc39e019 [ 169.767793][ T7257] RDX: 0000200000000840 RSI: 000000004048aec9 RDI: 0000000000000004 [ 169.767802][ T7257] RBP: 00007f03cc43500c R08: 0000000000000000 R09: 0000000000000000 [ 169.767810][ T7257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.767818][ T7257] R13: 00007f03cc626128 R14: 00007f03cc626090 R15: 00007ffd770bb9c8 [ 169.767830][ T7257] [ 169.767836][ T7257] [ 170.167404][ T7257] The buggy address belongs to the physical page: [ 170.173808][ T7257] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xe pfn:0x599c2 [ 170.182613][ T7257] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 170.189712][ T7257] raw: 00fff00000000000 ffffea0001a41648 ffff8880b85414b0 0000000000000000 [ 170.198296][ T7257] raw: 000000000000000e 0000000000000000 00000000ffffffff 0000000000000000 [ 170.206858][ T7257] page dumped because: kasan: bad access detected [ 170.213288][ T7257] page_owner tracks the page as freed [ 170.218630][ T7257] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 7257, tgid 7253 (syz.2.383), ts 169739507412, free_ts 169740156503 [ 170.236302][ T7257] post_alloc_hook+0xfd/0x120 [ 170.240987][ T7257] get_page_from_freelist+0xf48/0x3530 [ 170.246435][ T7257] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 170.252325][ T7257] alloc_pages_mpol+0x1fb/0x540 [ 170.257166][ T7257] folio_alloc_mpol_noprof+0x36/0x260 [ 170.262612][ T7257] shmem_alloc_folio+0x135/0x160 [ 170.267537][ T7257] shmem_alloc_and_add_folio+0x371/0xd40 [ 170.273149][ T7257] shmem_get_folio_gfp+0x6ad/0x1910 [ 170.278327][ T7257] shmem_fault+0x1f9/0xa20 [ 170.282718][ T7257] __do_fault+0x10b/0x440 [ 170.287046][ T7257] do_fault+0x2db/0x1750 [ 170.291281][ T7257] __handle_mm_fault+0x187d/0x2a00 [ 170.296381][ T7257] handle_mm_fault+0x37b/0xa30 [ 170.301132][ T7257] __get_user_pages+0x1178/0x32a0 [ 170.306139][ T7257] get_user_pages_unlocked+0x30a/0x7d0 [ 170.311583][ T7257] hva_to_pfn+0x871/0xd60 [ 170.315901][ T7257] page last free pid 7257 tgid 7253 stack trace: [ 170.322212][ T7257] __free_frozen_pages+0x79f/0x1090 [ 170.327416][ T7257] __folio_put+0x3b4/0x5f0 [ 170.331831][ T7257] kvm_release_page_clean+0x1dc/0x250 [ 170.337196][ T7257] __kvm_gpc_refresh+0x1a63/0x22d0 [ 170.342306][ T7257] __kvm_gpc_activate+0x2ab/0x490 [ 170.347338][ T7257] kvm_gpc_activate_hva+0x73/0xa0 [ 170.352353][ T7257] kvm_xen_hvm_set_attr+0x395/0x16a0 [ 170.357619][ T7257] kvm_arch_vm_ioctl+0x2a0/0x18d0 [ 170.362647][ T7257] kvm_vm_ioctl+0x1560/0x4180 [ 170.367320][ T7257] __x64_sys_ioctl+0x18e/0x210 [ 170.372069][ T7257] do_syscall_64+0x115/0x870 [ 170.376643][ T7257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.382528][ T7257] [ 170.384828][ T7257] Memory state around the buggy address: [ 170.390445][ T7257] ffff8880599c2800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 170.398487][ T7257] ffff8880599c2880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 170.406786][ T7257] >ffff8880599c2900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 170.414832][ T7257] ^ [ 170.418890][ T7257] ffff8880599c2980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 170.426946][ T7257] ffff8880599c2a00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 170.434999][ T7257] ================================================================== [ 170.443074][ T7257] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 170.450260][ T7257] CPU: 1 UID: 0 PID: 7257 Comm: syz.2.383 Not tainted syzkaller #0 PREEMPT(full) [ 170.459445][ T7257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 170.469481][ T7257] Call Trace: [ 170.472740][ T7257] [ 170.475651][ T7257] dump_stack_lvl+0x100/0x190 [ 170.480319][ T7257] vpanic+0x552/0x970 [ 170.484321][ T7257] ? __pfx_vpanic+0x10/0x10 [ 170.488821][ T7257] ? __pfx_vprintk_emit+0x10/0x10 [ 170.493832][ T7257] ? kvm_xen_shared_info_init+0x3c6/0x440 [ 170.499966][ T7257] panic+0xd1/0xe0 [ 170.503670][ T7257] ? __pfx_panic+0x10/0x10 [ 170.508068][ T7257] ? end_report.part.0+0x23/0x90 [ 170.512991][ T7257] ? rcu_is_watching+0x12/0xc0 [ 170.517745][ T7257] ? end_report.part.0+0x23/0x90 [ 170.522666][ T7257] ? check_panic_on_warn+0x1f/0x90 [ 170.527782][ T7257] check_panic_on_warn.cold+0x19/0x34 [ 170.533151][ T7257] end_report.part.0+0x3a/0x90 [ 170.537907][ T7257] kasan_report.cold+0xe/0x18 [ 170.542572][ T7257] ? kvm_xen_shared_info_init+0x3c6/0x440 [ 170.548275][ T7257] kvm_xen_shared_info_init+0x3c6/0x440 [ 170.553809][ T7257] kvm_xen_hvm_set_attr+0xcef/0x16a0 [ 170.559076][ T7257] ? __might_fault+0xc5/0x140 [ 170.563751][ T7257] ? __pfx_kvm_xen_hvm_set_attr+0x10/0x10 [ 170.569456][ T7257] kvm_arch_vm_ioctl+0x2a0/0x18d0 [ 170.574476][ T7257] ? __lock_acquire+0x49f/0x1a40 [ 170.579401][ T7257] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 170.584840][ T7257] ? __update_page_owner_handle+0x390/0x530 [ 170.590718][ T7257] ? __lock_acquire+0x49f/0x1a40 [ 170.595641][ T7257] ? __lock_acquire+0x49f/0x1a40 [ 170.600581][ T7257] ? __lock_acquire+0x49f/0x1a40 [ 170.605519][ T7257] ? find_held_lock+0x2b/0x80 [ 170.610196][ T7257] ? is_bpf_text_address+0x8a/0x1a0 [ 170.615393][ T7257] ? is_bpf_text_address+0x8a/0x1a0 [ 170.620577][ T7257] ? bpf_ksym_find+0x128/0x1c0 [ 170.625345][ T7257] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 170.631499][ T7257] ? is_bpf_text_address+0x94/0x1a0 [ 170.636700][ T7257] ? kernel_text_address+0x8d/0x100 [ 170.641880][ T7257] ? __pfx_widen_string+0x10/0x10 [ 170.646885][ T7257] ? __kernel_text_address+0xd/0x30 [ 170.652089][ T7257] ? unwind_get_return_address+0x59/0xa0 [ 170.657706][ T7257] ? arch_stack_walk+0xa6/0xf0 [ 170.662461][ T7257] ? tomoyo_path_number_perm+0x46d/0x580 [ 170.668093][ T7257] ? stack_trace_save+0x8e/0xc0 [ 170.672938][ T7257] ? __pfx_stack_trace_save+0x10/0x10 [ 170.678292][ T7257] ? stack_depot_save_flags+0x27/0x9d0 [ 170.683785][ T7257] ? __lock_acquire+0x49f/0x1a40 [ 170.688725][ T7257] ? tomoyo_path_number_perm+0x46d/0x580 [ 170.694362][ T7257] kvm_vm_ioctl+0x1560/0x4180 [ 170.699065][ T7257] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.705125][ T7257] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 170.710161][ T7257] ? kasan_quarantine_put+0x104/0x240 [ 170.715537][ T7257] ? lockdep_hardirqs_on+0x78/0x100 [ 170.720729][ T7257] ? find_held_lock+0x2b/0x80 [ 170.725403][ T7257] ? tomoyo_path_number_perm+0x28f/0x580 [ 170.731024][ T7257] ? tomoyo_path_number_perm+0x28f/0x580 [ 170.736642][ T7257] ? tomoyo_path_number_perm+0x188/0x580 [ 170.742279][ T7257] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 170.748251][ T7257] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 170.754136][ T7257] ? do_vfs_ioctl+0x226/0x13e0 [ 170.758891][ T7257] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 170.763902][ T7257] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 170.770742][ T7257] ? __fget_files+0x215/0x3d0 [ 170.775400][ T7257] ? hook_file_ioctl_common+0x140/0x440 [ 170.780932][ T7257] ? selinux_file_ioctl+0x13b/0x290 [ 170.786115][ T7257] ? selinux_file_ioctl+0xb6/0x290 [ 170.791221][ T7257] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 170.796246][ T7257] __x64_sys_ioctl+0x18e/0x210 [ 170.801007][ T7257] do_syscall_64+0x115/0x870 [ 170.805605][ T7257] ? clear_bhb_loop+0x40/0x90 [ 170.810287][ T7257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.816169][ T7257] RIP: 0033:0x7f03cc39e019 [ 170.820575][ T7257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.840165][ T7257] RSP: 002b:00007f03cd189028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 170.848591][ T7257] RAX: ffffffffffffffda RBX: 00007f03cc626090 RCX: 00007f03cc39e019 [ 170.856552][ T7257] RDX: 0000200000000840 RSI: 000000004048aec9 RDI: 0000000000000004 [ 170.864513][ T7257] RBP: 00007f03cc43500c R08: 0000000000000000 R09: 0000000000000000 [ 170.872466][ T7257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.880416][ T7257] R13: 00007f03cc626128 R14: 00007f03cc626090 R15: 00007ffd770bb9c8 [ 170.888373][ T7257] [ 170.891726][ T7257] Kernel Offset: disabled [ 170.896065][ T7257] Rebooting in 86400 seconds..