[ 66.680833][ T40] audit: type=1400 audit(1777140312.892:104): avc: denied { transition } for pid=5969 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 66.688355][ T40] audit: type=1400 audit(1777140312.892:105): avc: denied { noatsecure } for pid=5969 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 66.694640][ T40] audit: type=1400 audit(1777140312.902:106): avc: denied { rlimitinh } for pid=5969 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 66.700609][ T40] audit: type=1400 audit(1777140312.902:107): avc: denied { siginh } for pid=5969 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:55037' (ED25519) to the list of known hosts. 2026/04/25 18:05:16 ignoring optional flag "type"="qemu" 2026/04/25 18:05:16 parsed 1 programs [ 70.844518][ T40] audit: type=1400 audit(1777140317.062:108): avc: denied { unlink } for pid=6006 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 71.804871][ T6006] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.975982][ T89] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.979304][ T89] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.994173][ T89] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.996745][ T89] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.263860][ T5784] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.268557][ T5784] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.271919][ T5784] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.275271][ T5784] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.278616][ T5784] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.230934][ T6086] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.233852][ T6086] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.236173][ T6086] bridge_slave_0: entered allmulticast mode [ 73.238777][ T6086] bridge_slave_0: entered promiscuous mode [ 73.241768][ T6086] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.244351][ T6086] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.246689][ T6086] bridge_slave_1: entered allmulticast mode [ 73.249286][ T6086] bridge_slave_1: entered promiscuous mode [ 73.289276][ T6086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.294492][ T6086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.332728][ T6086] team0: Port device team_slave_0 added [ 73.335869][ T6086] team0: Port device team_slave_1 added [ 73.364303][ T6086] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.366527][ T6086] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.375883][ T6086] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.380139][ T6086] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.382410][ T6086] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.390361][ T6086] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.428050][ T6086] hsr_slave_0: entered promiscuous mode [ 73.430404][ T6086] hsr_slave_1: entered promiscuous mode [ 74.040460][ T6086] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.049335][ T6086] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.052105][ T6086] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.057645][ T6086] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.061466][ T6086] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.065651][ T6086] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.068388][ T6086] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.073207][ T6086] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.116624][ T6086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.127750][ T6086] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.135193][ T89] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.137518][ T89] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.142850][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.145190][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.343819][ T6086] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.366251][ T6086] veth0_vlan: entered promiscuous mode [ 74.371471][ T6086] veth1_vlan: entered promiscuous mode [ 74.394467][ T6086] veth0_macvtap: entered promiscuous mode [ 74.398730][ T6086] veth1_macvtap: entered promiscuous mode [ 74.407397][ T6086] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.414162][ T6086] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.420351][ T89] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.427063][ T89] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.433633][ T89] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.438355][ T89] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.505551][ T89] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.578955][ T89] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.673921][ T89] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.725584][ T89] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/04/25 18:05:21 executed programs: 0 [ 74.816965][ T5784] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.821750][ T5784] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 74.828894][ T5784] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.832565][ T5784] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.835503][ T5784] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.198037][ T6204] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.200460][ T6204] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.203123][ T6204] bridge_slave_0: entered allmulticast mode [ 75.206414][ T6204] bridge_slave_0: entered promiscuous mode [ 75.209633][ T6204] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.211958][ T6204] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.214301][ T6204] bridge_slave_1: entered allmulticast mode [ 75.217296][ T6204] bridge_slave_1: entered promiscuous mode [ 75.249387][ T6204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.255619][ T6204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.290298][ T6204] team0: Port device team_slave_0 added [ 75.294281][ T6204] team0: Port device team_slave_1 added [ 75.326845][ T6204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.329123][ T6204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.337118][ T6204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.341905][ T6204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.344254][ T6204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.352583][ T6204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.390090][ T6204] hsr_slave_0: entered promiscuous mode [ 75.392336][ T6204] hsr_slave_1: entered promiscuous mode [ 75.394381][ T6204] debugfs: 'hsr0' already exists in 'hsr' [ 75.396175][ T6204] Cannot create hsr debugfs directory [ 76.235264][ T1434] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.238426][ T1434] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.872561][ T62] Bluetooth: hci0: command tx timeout [ 77.397953][ T89] bridge_slave_1: left allmulticast mode [ 77.399848][ T89] bridge_slave_1: left promiscuous mode [ 77.401727][ T89] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.408059][ T89] bridge_slave_0: left allmulticast mode [ 77.410433][ T89] bridge_slave_0: left promiscuous mode [ 77.413607][ T89] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.576708][ T89] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 77.581065][ T89] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 77.585647][ T89] bond0 (unregistering): Released all slaves [ 77.594799][ T5440] 8021q: adding VLAN 0 to HW filter on device eth2 [ 77.717195][ T89] hsr_slave_0: left promiscuous mode [ 77.720112][ T89] hsr_slave_1: left promiscuous mode [ 77.723164][ T89] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.726141][ T89] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.730054][ T89] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.733234][ T89] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.740730][ T89] veth1_macvtap: left promiscuous mode [ 77.748891][ T89] veth0_macvtap: left promiscuous mode [ 77.751368][ T89] veth1_vlan: left promiscuous mode [ 77.754727][ T89] veth0_vlan: left promiscuous mode [ 77.890588][ T89] team0 (unregistering): Port device team_slave_1 removed [ 77.897374][ T89] team0 (unregistering): Port device team_slave_0 removed [ 77.972221][ T5440] 8021q: adding VLAN 0 to HW filter on device eth3 [ 78.461122][ T6204] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.467491][ T6204] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 78.471115][ T6204] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.478563][ T6204] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 78.481680][ T6204] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.486264][ T6204] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 78.489113][ T6204] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.493241][ T6204] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 78.526496][ T6204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.535669][ T6204] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.540612][ T222] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.543465][ T222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.552049][ T222] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.554473][ T222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.819739][ T6204] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.848595][ T6204] veth0_vlan: entered promiscuous mode [ 78.854022][ T6204] veth1_vlan: entered promiscuous mode [ 78.868060][ T6204] veth0_macvtap: entered promiscuous mode [ 78.871853][ T6204] veth1_macvtap: entered promiscuous mode [ 78.881836][ T6204] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.888937][ T6204] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.896380][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.899182][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.903118][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.905897][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.939197][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.942345][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.952320][ T62] Bluetooth: hci0: command tx timeout [ 78.958847][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.961582][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.984401][ T40] audit: type=1400 audit(1777140325.202:109): avc: denied { name_bind } for pid=6274 comm="syz-executor" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 78.991157][ T40] audit: type=1400 audit(1777140325.202:110): avc: denied { node_bind } for pid=6274 comm="syz-executor" saddr=224.0.0.1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 79.000566][ T40] audit: type=1400 audit(1777140325.202:111): avc: denied { prog_load } for pid=6274 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 79.006629][ T40] audit: type=1400 audit(1777140325.202:112): avc: denied { bpf } for pid=6274 comm="syz-executor" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 79.013331][ T40] audit: type=1400 audit(1777140325.202:113): avc: denied { perfmon } for pid=6274 comm="syz-executor" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 79.019758][ T40] audit: type=1400 audit(1777140325.202:114): avc: denied { prog_run } for pid=6274 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 79.025926][ T40] audit: type=1400 audit(1777140325.202:115): avc: denied { map_create } for pid=6274 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 79.031956][ T40] audit: type=1400 audit(1777140325.202:116): avc: denied { map_read map_write } for pid=6274 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 79.058816][ T6276] ------------[ cut here ]------------ [ 79.061158][ T6276] TCP recvmsg seq # bug 2: copied 861B81A9, seq 85B39731, rcvnxt 86162895, fl 40 [ 79.064892][ T6276] WARNING: net/ipv4/tcp.c:2748 at tcp_recvmsg_locked+0x92c/0x2a20, CPU#3: syz-executor/6276 [ 79.069057][ T6276] Modules linked in: [ 79.070521][ T6276] CPU: 3 UID: 0 PID: 6276 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 79.073710][ T6276] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 79.076959][ T6276] RIP: 0010:tcp_recvmsg_locked+0x939/0x2a20 [ 79.078847][ T6276] Code: 20 48 89 f0 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 db 1c 00 00 48 8d 3d 34 79 ef 06 48 8b 04 24 44 8b 44 24 30 89 da 8b 30 <67> 48 0f b9 3a e9 5f fb ff ff e8 c8 a1 11 f8 49 8d 5d 60 be 08 00 [ 79.084979][ T6276] RSP: 0018:ffffc900036873a0 EFLAGS: 00010246 [ 79.086921][ T6276] RAX: ffff888037ddbd00 RBX: 0000000085b39731 RCX: 0000000086162895 [ 79.089424][ T6276] RDX: 0000000085b39731 RSI: 00000000861b81a9 RDI: ffffffff90e66670 [ 79.091902][ T6276] RBP: 000000000003ff2c R08: 0000000000000040 R09: 0000000000000000 [ 79.094441][ T6276] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 [ 79.096913][ T6276] R13: ffff88802dba3068 R14: ffff88802dba3074 R15: ffff88802dba3040 [ 79.099399][ T6276] FS: 00007fba4641c6c0(0000) GS:ffff8880d6679000(0000) knlGS:0000000000000000 [ 79.102267][ T6276] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 79.104356][ T6276] CR2: 00007fba4641bf90 CR3: 000000002c910000 CR4: 0000000000352ef0 [ 79.106851][ T6276] Call Trace: [ 79.107927][ T6276] [ 79.108882][ T6276] ? __pfx_tcp_recvmsg_locked+0x10/0x10 [ 79.110640][ T6276] ? lock_acquire+0x1b1/0x370 [ 79.112201][ T6276] ? find_held_lock+0x2b/0x80 [ 79.113707][ T6276] ? finish_task_switch.isra.0+0x2c6/0x1010 [ 79.115578][ T6276] ? import_ubuf+0x1b6/0x220 [ 79.117055][ T6276] tcp_zerocopy_receive+0x14e3/0x27c0 [ 79.118764][ T6276] ? __pv_queued_spin_lock_slowpath+0x284/0xc00 [ 79.120771][ T6276] ? __pfx_tcp_zerocopy_receive+0x10/0x10 [ 79.122662][ T6276] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 79.124373][ T6276] ? __local_bh_enable_ip+0x9e/0x120 [ 79.126065][ T6276] ? lockdep_hardirqs_on+0x78/0x100 [ 79.127713][ T6276] do_tcp_getsockopt+0xc1e/0x2aa0 [ 79.129338][ T6276] ? __pfx_do_tcp_getsockopt+0x10/0x10 [ 79.131078][ T6276] ? __lock_acquire+0x4a5/0x2630 [ 79.132716][ T6276] ? find_held_lock+0x2b/0x80 [ 79.134263][ T6276] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 79.135994][ T6276] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 79.137705][ T6276] ? __lock_acquire+0x4a5/0x2630 [ 79.139281][ T6276] ? avc_has_perm+0x135/0x1e0 [ 79.140782][ T6276] ? __pfx_avc_has_perm+0x10/0x10 [ 79.142461][ T6276] ? find_held_lock+0x2b/0x80 [ 79.143967][ T6276] ? __might_fault+0xc5/0x140 [ 79.145477][ T6276] ? __might_fault+0xc5/0x140 [ 79.146996][ T6276] ? _copy_from_user+0x59/0xd0 [ 79.148563][ T6276] tcp_getsockopt+0xe4/0x110 [ 79.150046][ T6276] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 79.151918][ T6276] do_sock_getsockopt+0x50a/0x6e0 [ 79.153611][ T6276] ? __lock_acquire+0x4a5/0x2630 [ 79.155215][ T6276] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 79.156972][ T6276] ? css_rstat_updated+0x1ce/0x5a0 [ 79.158610][ T6276] ? find_held_lock+0x2b/0x80 [ 79.160118][ T6276] ? __fget_files+0x21f/0x3d0 [ 79.161612][ T6276] __sys_getsockopt+0x148/0x260 [ 79.163208][ T6276] ? __x64_sys_getsockopt+0xbd/0x160 [ 79.164872][ T6276] __x64_sys_getsockopt+0xbd/0x160 [ 79.166485][ T6276] ? do_syscall_64+0x90/0xf80 [ 79.167965][ T6276] ? lockdep_hardirqs_on+0x78/0x100 [ 79.169591][ T6276] do_syscall_64+0x10b/0xf80 [ 79.171041][ T6276] ? clear_bhb_loop+0x40/0x90 [ 79.172588][ T6276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.174454][ T6276] RIP: 0033:0x7fba4566e9f9 [ 79.175861][ T6276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48 [ 79.181779][ T6276] RSP: 002b:00007fba4641c078 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 79.184505][ T6276] RAX: ffffffffffffffda RBX: 00007fba457ac050 RCX: 00007fba4566e9f9 [ 79.186996][ T6276] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000005 [ 79.189563][ T6276] RBP: 00007fba456cf4bc R08: 0000000020000380 R09: 0000000000000000 [ 79.192181][ T6276] R10: 0000000020000340 R11: 0000000000000246 R12: 0000000000000000 [ 79.194695][ T6276] R13: 000000000000006e R14: 00007fba457ac050 R15: 00007fff1dbd3a78 [ 79.197174][ T6276] [ 79.198196][ T6276] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 79.200480][ T6276] CPU: 3 UID: 0 PID: 6276 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 79.203437][ T6276] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 79.206611][ T6276] Call Trace: [ 79.207659][ T6276] [ 79.208604][ T6276] dump_stack_lvl+0x100/0x190 [ 79.210106][ T6276] vpanic+0x552/0x970 [ 79.211344][ T6276] ? __pfx_vpanic+0x10/0x10 [ 79.212742][ T6276] panic+0xd1/0xe0 [ 79.213915][ T6276] ? __pfx_panic+0x10/0x10 [ 79.215362][ T6276] ? check_panic_on_warn+0x1f/0x90 [ 79.216986][ T6276] check_panic_on_warn.cold+0x19/0x34 [ 79.218693][ T6276] ? tcp_recvmsg_locked+0x92c/0x2a20 [ 79.220369][ T6276] __warn.cold+0x191/0x328 [ 79.221796][ T6276] __report_bug+0x296/0x3d0 [ 79.223256][ T6276] ? tcp_recvmsg_locked+0x92c/0x2a20 [ 79.224933][ T6276] ? __pfx___report_bug+0x10/0x10 [ 79.226553][ T6276] ? __kasan_check_byte+0x13/0x50 [ 79.228168][ T6276] ? is_bpf_text_address+0x8a/0x1a0 [ 79.229826][ T6276] report_bug_entry+0xe1/0x290 [ 79.231348][ T6276] ? tcp_recvmsg_locked+0x939/0x2a20 [ 79.233024][ T6276] handle_bug+0x1cd/0x2a0 [ 79.234422][ T6276] exc_invalid_op+0x17/0x50 [ 79.235872][ T6276] asm_exc_invalid_op+0x1a/0x20 [ 79.237437][ T6276] RIP: 0010:tcp_recvmsg_locked+0x939/0x2a20 [ 79.239331][ T6276] Code: 20 48 89 f0 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 db 1c 00 00 48 8d 3d 34 79 ef 06 48 8b 04 24 44 8b 44 24 30 89 da 8b 30 <67> 48 0f b9 3a e9 5f fb ff ff e8 c8 a1 11 f8 49 8d 5d 60 be 08 00 [ 79.245417][ T6276] RSP: 0018:ffffc900036873a0 EFLAGS: 00010246 [ 79.247337][ T6276] RAX: ffff888037ddbd00 RBX: 0000000085b39731 RCX: 0000000086162895 [ 79.249816][ T6276] RDX: 0000000085b39731 RSI: 00000000861b81a9 RDI: ffffffff90e66670 [ 79.252296][ T6276] RBP: 000000000003ff2c R08: 0000000000000040 R09: 0000000000000000 [ 79.254785][ T6276] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 [ 79.257255][ T6276] R13: ffff88802dba3068 R14: ffff88802dba3074 R15: ffff88802dba3040 [ 79.259759][ T6276] ? __pfx_tcp_recvmsg_locked+0x10/0x10 [ 79.261509][ T6276] ? lock_acquire+0x1b1/0x370 [ 79.263036][ T6276] ? find_held_lock+0x2b/0x80 [ 79.264530][ T6276] ? finish_task_switch.isra.0+0x2c6/0x1010 [ 79.266405][ T6276] ? import_ubuf+0x1b6/0x220 [ 79.267883][ T6276] tcp_zerocopy_receive+0x14e3/0x27c0 [ 79.269593][ T6276] ? __pv_queued_spin_lock_slowpath+0x284/0xc00 [ 79.271559][ T6276] ? __pfx_tcp_zerocopy_receive+0x10/0x10 [ 79.273362][ T6276] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 79.275141][ T6276] ? __local_bh_enable_ip+0x9e/0x120 [ 79.276807][ T6276] ? lockdep_hardirqs_on+0x78/0x100 [ 79.278472][ T6276] do_tcp_getsockopt+0xc1e/0x2aa0 [ 79.280084][ T6276] ? __pfx_do_tcp_getsockopt+0x10/0x10 [ 79.281830][ T6276] ? __lock_acquire+0x4a5/0x2630 [ 79.283424][ T6276] ? find_held_lock+0x2b/0x80 [ 79.284964][ T6276] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 79.286669][ T6276] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 79.288373][ T6276] ? __lock_acquire+0x4a5/0x2630 [ 79.289965][ T6276] ? avc_has_perm+0x135/0x1e0 [ 79.291466][ T6276] ? __pfx_avc_has_perm+0x10/0x10 [ 79.293071][ T6276] ? find_held_lock+0x2b/0x80 [ 79.294580][ T6276] ? __might_fault+0xc5/0x140 [ 79.296083][ T6276] ? __might_fault+0xc5/0x140 [ 79.297593][ T6276] ? _copy_from_user+0x59/0xd0 [ 79.299126][ T6276] tcp_getsockopt+0xe4/0x110 [ 79.300626][ T6276] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 79.302495][ T6276] do_sock_getsockopt+0x50a/0x6e0 [ 79.304112][ T6276] ? __lock_acquire+0x4a5/0x2630 [ 79.305695][ T6276] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 79.307437][ T6276] ? css_rstat_updated+0x1ce/0x5a0 [ 79.309061][ T6276] ? find_held_lock+0x2b/0x80 [ 79.310571][ T6276] ? __fget_files+0x21f/0x3d0 [ 79.312073][ T6276] __sys_getsockopt+0x148/0x260 [ 79.313637][ T6276] ? __x64_sys_getsockopt+0xbd/0x160 [ 79.315331][ T6276] __x64_sys_getsockopt+0xbd/0x160 [ 79.316954][ T6276] ? do_syscall_64+0x90/0xf80 [ 79.318467][ T6276] ? lockdep_hardirqs_on+0x78/0x100 [ 79.320113][ T6276] do_syscall_64+0x10b/0xf80 [ 79.321591][ T6276] ? clear_bhb_loop+0x40/0x90 [ 79.323099][ T6276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.324973][ T6276] RIP: 0033:0x7fba4566e9f9 [ 79.326399][ T6276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48 [ 79.332396][ T6276] RSP: 002b:00007fba4641c078 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 79.335036][ T6276] RAX: ffffffffffffffda RBX: 00007fba457ac050 RCX: 00007fba4566e9f9 [ 79.337508][ T6276] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000005 [ 79.340025][ T6276] RBP: 00007fba456cf4bc R08: 0000000020000380 R09: 0000000000000000 [ 79.342515][ T6276] R10: 0000000020000340 R11: 0000000000000246 R12: 0000000000000000 [ 79.345035][ T6276] R13: 000000000000006e R14: 00007fba457ac050 R15: 00007fff1dbd3a78 [ 79.347550][ T6276] [ 79.349149][ T6276] Kernel Offset: disabled [ 79.350538][ T6276] Rebooting in 86400 seconds..