[ 53.179901][ T40] audit: type=1400 audit(1766802571.886:61): avc: denied { siginh } for pid=5906 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:63547' (ED25519) to the list of known hosts. [ 60.331763][ T40] audit: type=1400 audit(1766802579.056:62): avc: denied { execute } for pid=5928 comm="sh" name="syz-execprog" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 60.340172][ T40] audit: type=1400 audit(1766802579.056:63): avc: denied { execute_no_trans } for pid=5928 comm="sh" path="/syz-execprog" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 2025/12/27 02:29:40 parsed 1 programs [ 62.045364][ T40] audit: type=1400 audit(1766802580.766:64): avc: denied { node_bind } for pid=5928 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 64.798723][ T40] audit: type=1400 audit(1766802583.526:65): avc: denied { mounton } for pid=5937 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 64.807873][ T40] audit: type=1400 audit(1766802583.536:66): avc: denied { mount } for pid=5937 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 64.810667][ T5937] cgroup: Unknown subsys name 'net' [ 64.822273][ T40] audit: type=1400 audit(1766802583.546:67): avc: denied { unmount } for pid=5937 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 64.962074][ T5937] cgroup: Unknown subsys name 'cpuset' [ 64.968975][ T5937] cgroup: Unknown subsys name 'rlimit' [ 65.168144][ T40] audit: type=1400 audit(1766802583.896:68): avc: denied { setattr } for pid=5937 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 65.178529][ T40] audit: type=1400 audit(1766802583.906:69): avc: denied { create } for pid=5937 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.186406][ T40] audit: type=1400 audit(1766802583.906:70): avc: denied { write } for pid=5937 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.195306][ T40] audit: type=1400 audit(1766802583.906:71): avc: denied { read } for pid=5937 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.230411][ T5940] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 66.200357][ T5937] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 67.921942][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 67.921960][ T40] audit: type=1400 audit(1766802586.646:82): avc: denied { execmem } for pid=5947 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 67.940940][ T40] audit: type=1400 audit(1766802586.666:83): avc: denied { read } for pid=5948 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 67.948483][ T40] audit: type=1400 audit(1766802586.666:84): avc: denied { open } for pid=5948 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 67.957541][ T40] audit: type=1400 audit(1766802586.666:85): avc: denied { mounton } for pid=5948 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 68.070044][ T40] audit: type=1400 audit(1766802586.796:86): avc: denied { module_request } for pid=5948 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 68.101971][ T5948] chnl_net:caif_netlink_parms(): no params data found [ 68.193685][ T5948] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.197039][ T5948] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.199641][ T5948] bridge_slave_0: entered allmulticast mode [ 68.203003][ T5948] bridge_slave_0: entered promiscuous mode [ 68.208219][ T5948] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.210945][ T5948] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.214141][ T5948] bridge_slave_1: entered allmulticast mode [ 68.219140][ T5948] bridge_slave_1: entered promiscuous mode [ 68.248549][ T5948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.255197][ T5948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.278721][ T5948] team0: Port device team_slave_0 added [ 68.283629][ T5948] team0: Port device team_slave_1 added [ 68.309097][ T5948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.312141][ T5948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.324122][ T5948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.329929][ T5948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.332203][ T5948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.342007][ T5948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.386524][ T5948] hsr_slave_0: entered promiscuous mode [ 68.389132][ T5948] hsr_slave_1: entered promiscuous mode [ 68.504882][ T5948] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.510760][ T5948] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.517780][ T5948] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.522549][ T5948] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.541730][ T5948] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.544083][ T5948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.547064][ T5948] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.549527][ T5948] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.584346][ T5948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.594568][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.597662][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.604970][ T5948] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.611202][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.613671][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.621327][ T1157] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.623634][ T1157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.686108][ T40] audit: type=1400 audit(1766802587.406:87): avc: denied { sys_module } for pid=5948 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 68.798272][ T5948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.835866][ T5948] veth0_vlan: entered promiscuous mode [ 68.844994][ T5948] veth1_vlan: entered promiscuous mode [ 68.871703][ T5948] veth0_macvtap: entered promiscuous mode [ 68.878684][ T5948] veth1_macvtap: entered promiscuous mode [ 68.889545][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.896577][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.904532][ T1157] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.908764][ T1157] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.912971][ T1157] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.918281][ T1157] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.944710][ T40] audit: type=1400 audit(1766802587.666:88): avc: denied { mount } for pid=5948 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 68.953538][ T40] audit: type=1400 audit(1766802587.666:89): avc: denied { mounton } for pid=5948 comm="syz-executor" path="/syzkaller.S3yoIV/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 68.962817][ T40] audit: type=1400 audit(1766802587.676:90): avc: denied { mount } for pid=5948 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 68.971390][ T40] audit: type=1400 audit(1766802587.676:91): avc: denied { mounton } for pid=5948 comm="syz-executor" path="/syzkaller.S3yoIV/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 68.992520][ T5948] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 69.072749][ T1157] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.148375][ T1157] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.233813][ T1157] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.315330][ T1157] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.010096][ T5292] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.014554][ T5292] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.017838][ T5292] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.021524][ T5292] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.024937][ T5292] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.893255][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.895966][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.919229][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.923818][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/12/27 02:29:49 executed programs: 0 [ 71.241991][ T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.245043][ T64] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.248068][ T64] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.251156][ T64] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.254829][ T64] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.418619][ T6051] chnl_net:caif_netlink_parms(): no params data found [ 71.508626][ T6051] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.511032][ T6051] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.513385][ T6051] bridge_slave_0: entered allmulticast mode [ 71.516114][ T6051] bridge_slave_0: entered promiscuous mode [ 71.519624][ T6051] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.522170][ T6051] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.524479][ T6051] bridge_slave_1: entered allmulticast mode [ 71.527255][ T6051] bridge_slave_1: entered promiscuous mode [ 71.545519][ T6051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.551730][ T6051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.568298][ T6051] team0: Port device team_slave_0 added [ 71.571490][ T6051] team0: Port device team_slave_1 added [ 71.586343][ T6051] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.589144][ T6051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.599240][ T6051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.605519][ T6051] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.607967][ T6051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.616174][ T6051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.638678][ T6051] hsr_slave_0: entered promiscuous mode [ 71.640927][ T6051] hsr_slave_1: entered promiscuous mode [ 71.643040][ T6051] debugfs: 'hsr0' already exists in 'hsr' [ 71.645075][ T6051] Cannot create hsr debugfs directory [ 71.900288][ T1157] bridge_slave_1: left allmulticast mode [ 71.903061][ T1157] bridge_slave_1: left promiscuous mode [ 71.905931][ T1157] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.915443][ T1157] bridge_slave_0: left allmulticast mode [ 71.918902][ T1157] bridge_slave_0: left promiscuous mode [ 71.921044][ T1157] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.160391][ T1157] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 72.166642][ T1157] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 72.170577][ T1157] bond0 (unregistering): Released all slaves [ 72.325862][ T1157] hsr_slave_0: left promiscuous mode [ 72.329057][ T1157] hsr_slave_1: left promiscuous mode [ 72.331972][ T1157] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.335226][ T1157] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 72.339764][ T1157] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.342907][ T1157] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 72.359434][ T1157] veth1_macvtap: left promiscuous mode [ 72.362486][ T1157] veth0_macvtap: left promiscuous mode [ 72.365093][ T1157] veth1_vlan: left promiscuous mode [ 72.368501][ T1157] veth0_vlan: left promiscuous mode [ 72.698618][ T1157] team0 (unregistering): Port device team_slave_1 removed [ 72.722326][ T1157] team0 (unregistering): Port device team_slave_0 removed [ 73.181901][ T6051] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.186439][ T6051] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.196780][ T6051] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.203159][ T6051] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.267897][ T64] Bluetooth: hci0: command tx timeout [ 73.281988][ T6051] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.299604][ T6051] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.310846][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.314044][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.330648][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.333912][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.715249][ T6051] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.744605][ T6051] veth0_vlan: entered promiscuous mode [ 73.751088][ T6051] veth1_vlan: entered promiscuous mode [ 73.768954][ T6051] veth0_macvtap: entered promiscuous mode [ 73.774280][ T6051] veth1_macvtap: entered promiscuous mode [ 73.786982][ T6051] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.795032][ T6051] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.807778][ T46] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.810646][ T46] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.819896][ T46] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.825592][ T46] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.896782][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.900889][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.926455][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.930464][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.970169][ T40] kauditd_printk_skb: 24 callbacks suppressed [ 73.970180][ T40] audit: type=1400 audit(1766802592.696:116): avc: denied { prog_load } for pid=6088 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 73.988880][ T40] audit: type=1400 audit(1766802592.696:117): avc: denied { bpf } for pid=6088 comm="syz.0.17" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 73.998547][ T40] audit: type=1400 audit(1766802592.706:118): avc: denied { map_create } for pid=6088 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 74.005060][ T40] audit: type=1400 audit(1766802592.706:119): avc: denied { map_read map_write } for pid=6088 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 74.012689][ T40] audit: type=1400 audit(1766802592.706:120): avc: denied { perfmon } for pid=6088 comm="syz.0.17" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 74.019463][ T40] audit: type=1400 audit(1766802592.706:121): avc: denied { prog_run } for pid=6088 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 74.027219][ T40] audit: type=1400 audit(1766802592.706:122): avc: denied { name_bind } for pid=6088 comm="syz.0.17" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 75.357222][ T64] Bluetooth: hci0: command tx timeout [ 76.311320][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.313661][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 2025/12/27 02:29:55 executed programs: 5 [ 76.592668][ T6099] ------------[ cut here ]------------ [ 76.596069][ T6099] WARNING: net/core/skbuff.c:7243 at skb_attempt_defer_free+0x641/0x710, CPU#3: syz.0.20/6099 [ 76.601316][ T6099] Modules linked in: [ 76.603416][ T6099] CPU: 3 UID: 0 PID: 6099 Comm: syz.0.20 Not tainted syzkaller #0 PREEMPT(full) [ 76.607900][ T6099] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 76.613172][ T6099] RIP: 0010:skb_attempt_defer_free+0x641/0x710 [ 76.616206][ T6099] Code: 66 e6 f8 e9 5d ff ff ff e8 fc 8b 7c f8 90 0f 0b 90 e9 f0 fc ff ff e8 ee 8b 7c f8 90 0f 0b 90 e9 74 fc ff ff e8 e0 8b 7c f8 90 <0f> 0b 90 e9 95 fc ff ff e8 d2 8b 7c f8 90 0f 0b 90 48 b8 00 00 00 [ 76.626220][ T6099] RSP: 0018:ffffc9000463f5a8 EFLAGS: 00010293 [ 76.629308][ T6099] RAX: 0000000000000000 RBX: ffff888053a2d180 RCX: ffffffff894256f5 [ 76.633111][ T6099] RDX: ffff88802644a4c0 RSI: ffffffff89425a90 RDI: ffff888053a2d1e0 [ 76.636995][ T6099] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000001 [ 76.640751][ T6099] R10: 0000000000000000 R11: ffff88802644aff0 R12: 0000000000000000 [ 76.644957][ T6099] R13: 1ffff920008c7eb9 R14: 0000000000000000 R15: ffff888053a2d1d8 [ 76.648916][ T6099] FS: 00007fad2f19c6c0(0000) GS:ffff8880d6bf5000(0000) knlGS:0000000000000000 [ 76.653186][ T6099] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 76.656462][ T6099] CR2: 00007fad2f19bf98 CR3: 000000002ccfd000 CR4: 0000000000352ef0 [ 76.660173][ T6099] Call Trace: [ 76.661879][ T6099] [ 76.663288][ T6099] ? __pfx__copy_to_iter+0x10/0x10 [ 76.665687][ T6099] ? __pfx_skb_attempt_defer_free+0x10/0x10 [ 76.668488][ T6099] ? __lock_acquire+0x436/0x2890 [ 76.670837][ T6099] skb_consume_udp+0x19f/0x250 [ 76.673094][ T6099] udp_recvmsg+0x6c7/0x1350 [ 76.675244][ T6099] ? __pfx_udp_recvmsg+0x10/0x10 [ 76.678081][ T6099] ? find_held_lock+0x2b/0x80 [ 76.680434][ T6099] sk_udp_recvmsg+0x9b/0x120 [ 76.682675][ T6099] udp_bpf_recvmsg+0x5c0/0xe40 [ 76.684862][ T6099] ? trace_mm_page_alloc+0x11b/0x180 [ 76.687450][ T6099] ? __pfx_udp_bpf_recvmsg+0x10/0x10 [ 76.689990][ T6099] ? sock_has_perm+0x258/0x2f0 [ 76.692245][ T6099] ? __pfx_sock_has_perm+0x10/0x10 [ 76.694735][ T6099] ? __pfx_udp_bpf_recvmsg+0x10/0x10 [ 76.698142][ T6099] inet_recvmsg+0x625/0x6a0 [ 76.700277][ T6099] ? __pfx_inet_recvmsg+0x10/0x10 [ 76.702770][ T6099] sock_recvmsg+0x1b2/0x250 [ 76.705052][ T6099] ____sys_recvmsg+0x218/0x6b0 [ 76.707830][ T6099] ? __pfx_____sys_recvmsg+0x10/0x10 [ 76.710441][ T6099] ? __lock_acquire+0x436/0x2890 [ 76.712789][ T6099] ___sys_recvmsg+0x114/0x1a0 [ 76.715142][ T6099] ? __pfx____sys_recvmsg+0x10/0x10 [ 76.717791][ T6099] ? find_held_lock+0x2b/0x80 [ 76.720161][ T6099] do_recvmmsg+0x2fe/0x750 [ 76.722324][ T6099] ? __pfx_do_recvmmsg+0x10/0x10 [ 76.724797][ T6099] ? find_held_lock+0x2b/0x80 [ 76.727259][ T6099] __x64_sys_recvmmsg+0x22a/0x280 [ 76.730097][ T6099] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 76.732854][ T6099] do_syscall_64+0xcd/0xf80 [ 76.735504][ T6099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.738879][ T6099] RIP: 0033:0x7fad2e38f7c9 [ 76.741392][ T6099] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.750760][ T6099] RSP: 002b:00007fad2f19c038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 76.754747][ T6099] RAX: ffffffffffffffda RBX: 00007fad2e5e6090 RCX: 00007fad2e38f7c9 [ 76.758628][ T6099] RDX: 0000000000000001 RSI: 00002000000047c0 RDI: 0000000000000003 [ 76.762430][ T6099] RBP: 00007fad2e413f91 R08: 0000000000000000 R09: 0000000000000000 [ 76.766221][ T6099] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 76.770010][ T6099] R13: 00007fad2e5e6128 R14: 00007fad2e5e6090 R15: 00007ffd88783058 [ 76.774053][ T6099] [ 76.775805][ T6099] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 76.779691][ T6099] CPU: 3 UID: 0 PID: 6099 Comm: syz.0.20 Not tainted syzkaller #0 PREEMPT(full) [ 76.784232][ T6099] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 76.789436][ T6099] Call Trace: [ 76.791184][ T6099] [ 76.792639][ T6099] dump_stack_lvl+0x3d/0x1f0 [ 76.794967][ T6099] vpanic+0x640/0x6f0 [ 76.796990][ T6099] ? skb_attempt_defer_free+0x641/0x710 [ 76.799683][ T6099] panic+0xca/0xd0 [ 76.801507][ T6099] ? __pfx_panic+0x10/0x10 [ 76.803698][ T6099] ? check_panic_on_warn+0x1f/0xb0 [ 76.806468][ T6099] check_panic_on_warn+0xab/0xb0 [ 76.808814][ T6099] __warn+0x108/0x3c0 [ 76.810862][ T6099] __report_bug+0x2a0/0x520 [ 76.812982][ T6099] ? skb_attempt_defer_free+0x641/0x710 [ 76.815629][ T6099] ? __pfx___report_bug+0x10/0x10 [ 76.818037][ T6099] ? __lock_acquire+0x436/0x2890 [ 76.820596][ T6099] ? __lock_acquire+0x436/0x2890 [ 76.823055][ T6099] ? skb_attempt_defer_free+0x641/0x710 [ 76.825775][ T6099] report_bug+0xb2/0x220 [ 76.827762][ T6099] ? skb_attempt_defer_free+0x641/0x710 [ 76.830588][ T6099] handle_bug+0x127/0x260 [ 76.832786][ T6099] exc_invalid_op+0x17/0x50 [ 76.834980][ T6099] asm_exc_invalid_op+0x1a/0x20 [ 76.837454][ T6099] RIP: 0010:skb_attempt_defer_free+0x641/0x710 [ 76.840440][ T6099] Code: 66 e6 f8 e9 5d ff ff ff e8 fc 8b 7c f8 90 0f 0b 90 e9 f0 fc ff ff e8 ee 8b 7c f8 90 0f 0b 90 e9 74 fc ff ff e8 e0 8b 7c f8 90 <0f> 0b 90 e9 95 fc ff ff e8 d2 8b 7c f8 90 0f 0b 90 48 b8 00 00 00 [ 76.849712][ T6099] RSP: 0018:ffffc9000463f5a8 EFLAGS: 00010293 [ 76.852707][ T6099] RAX: 0000000000000000 RBX: ffff888053a2d180 RCX: ffffffff894256f5 [ 76.856534][ T6099] RDX: ffff88802644a4c0 RSI: ffffffff89425a90 RDI: ffff888053a2d1e0 [ 76.860239][ T6099] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000001 [ 76.864081][ T6099] R10: 0000000000000000 R11: ffff88802644aff0 R12: 0000000000000000 [ 76.867901][ T6099] R13: 1ffff920008c7eb9 R14: 0000000000000000 R15: ffff888053a2d1d8 [ 76.871756][ T6099] ? skb_attempt_defer_free+0x2a5/0x710 [ 76.874153][ T6099] ? skb_attempt_defer_free+0x640/0x710 [ 76.876840][ T6099] ? skb_attempt_defer_free+0x640/0x710 [ 76.879540][ T6099] ? __pfx__copy_to_iter+0x10/0x10 [ 76.882059][ T6099] ? __pfx_skb_attempt_defer_free+0x10/0x10 [ 76.884935][ T6099] ? __lock_acquire+0x436/0x2890 [ 76.887379][ T6099] skb_consume_udp+0x19f/0x250 [ 76.889771][ T6099] udp_recvmsg+0x6c7/0x1350 [ 76.891932][ T6099] ? __pfx_udp_recvmsg+0x10/0x10 [ 76.894405][ T6099] ? find_held_lock+0x2b/0x80 [ 76.896720][ T6099] sk_udp_recvmsg+0x9b/0x120 [ 76.898891][ T6099] udp_bpf_recvmsg+0x5c0/0xe40 [ 76.901220][ T6099] ? trace_mm_page_alloc+0x11b/0x180 [ 76.903780][ T6099] ? __pfx_udp_bpf_recvmsg+0x10/0x10 [ 76.906345][ T6099] ? sock_has_perm+0x258/0x2f0 [ 76.908699][ T6099] ? __pfx_sock_has_perm+0x10/0x10 [ 76.911461][ T6099] ? __pfx_udp_bpf_recvmsg+0x10/0x10 [ 76.914194][ T6099] inet_recvmsg+0x625/0x6a0 [ 76.916489][ T6099] ? __pfx_inet_recvmsg+0x10/0x10 [ 76.919025][ T6099] sock_recvmsg+0x1b2/0x250 [ 76.921189][ T6099] ____sys_recvmsg+0x218/0x6b0 [ 76.923537][ T6099] ? __pfx_____sys_recvmsg+0x10/0x10 [ 76.925461][ T6099] ? __lock_acquire+0x436/0x2890 [ 76.927747][ T6099] ___sys_recvmsg+0x114/0x1a0 [ 76.929911][ T6099] ? __pfx____sys_recvmsg+0x10/0x10 [ 76.931831][ T6099] ? find_held_lock+0x2b/0x80 [ 76.933491][ T6099] do_recvmmsg+0x2fe/0x750 [ 76.935082][ T6099] ? __pfx_do_recvmmsg+0x10/0x10 [ 76.936916][ T6099] ? find_held_lock+0x2b/0x80 [ 76.938558][ T6099] __x64_sys_recvmmsg+0x22a/0x280 [ 76.940369][ T6099] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 76.942349][ T6099] do_syscall_64+0xcd/0xf80 [ 76.943980][ T6099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.946171][ T6099] RIP: 0033:0x7fad2e38f7c9 [ 76.948207][ T6099] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.955562][ T6099] RSP: 002b:00007fad2f19c038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 76.958720][ T6099] RAX: ffffffffffffffda RBX: 00007fad2e5e6090 RCX: 00007fad2e38f7c9 [ 76.961483][ T6099] RDX: 0000000000000001 RSI: 00002000000047c0 RDI: 0000000000000003 [ 76.964264][ T6099] RBP: 00007fad2e413f91 R08: 0000000000000000 R09: 0000000000000000 [ 76.967250][ T6099] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 76.970260][ T6099] R13: 00007fad2e5e6128 R14: 00007fad2e5e6090 R15: 00007ffd88783058 [ 76.973153][ T6099] [ 76.975208][ T6099] Kernel Offset: disabled [ 76.976772][ T6099] Rebooting in 86400 seconds..