[ 87.514167][ T40] audit: type=1400 audit(1767367190.740:116): avc: denied { transition } for pid=6134 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 87.523711][ T40] audit: type=1400 audit(1767367190.740:117): avc: denied { noatsecure } for pid=6134 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 87.535539][ T40] audit: type=1400 audit(1767367190.750:118): avc: denied { rlimitinh } for pid=6134 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 87.542835][ T40] audit: type=1400 audit(1767367190.750:119): avc: denied { siginh } for pid=6134 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 91.808383][ T58] cfg80211: failed to load regulatory.db Warning: Permanently added '[localhost]:56061' (ED25519) to the list of known hosts. 2026/01/02 15:19:58 parsed 1 programs [ 95.648198][ T40] audit: type=1400 audit(1767367198.880:120): avc: denied { node_bind } for pid=6163 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 97.794844][ T40] audit: type=1400 audit(1767367201.020:121): avc: denied { read write } for pid=6187 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 97.803820][ T40] audit: type=1400 audit(1767367201.020:122): avc: denied { open } for pid=6187 comm="syz-executor" path="/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 97.838835][ T40] audit: type=1400 audit(1767367201.070:123): avc: denied { unlink } for pid=6187 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 98.147118][ T40] audit: type=1400 audit(1767367201.380:124): avc: denied { relabelto } for pid=6189 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 98.853079][ T6187] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 100.623449][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.627034][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.640500][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.646085][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.773722][ T65] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 100.778577][ T65] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 100.782260][ T65] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 100.785945][ T65] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 100.790360][ T65] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 101.232576][ T40] audit: type=1401 audit(1767367204.460:125): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 101.377462][ T6223] chnl_net:caif_netlink_parms(): no params data found [ 101.435145][ T6223] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.438992][ T6223] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.442069][ T6223] bridge_slave_0: entered allmulticast mode [ 101.446054][ T6223] bridge_slave_0: entered promiscuous mode [ 101.450440][ T6223] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.453002][ T6223] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.455544][ T6223] bridge_slave_1: entered allmulticast mode [ 101.459083][ T6223] bridge_slave_1: entered promiscuous mode [ 101.601653][ T6223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.608420][ T6223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.639977][ T6223] team0: Port device team_slave_0 added [ 101.644304][ T6223] team0: Port device team_slave_1 added [ 101.680814][ T6223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.683598][ T6223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.694968][ T6223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.702037][ T6223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.704610][ T6223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.714894][ T6223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.749617][ T6223] hsr_slave_0: entered promiscuous mode [ 101.753024][ T6223] hsr_slave_1: entered promiscuous mode [ 102.309289][ T6223] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 102.327667][ T6223] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 102.334891][ T6223] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 102.341865][ T6223] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 102.398567][ T6223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.411068][ T6223] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.417971][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.421217][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.430437][ T103] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.433696][ T103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.486936][ T40] audit: type=1400 audit(1767367205.720:126): avc: denied { sys_module } for pid=6223 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 102.586373][ T6223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.632819][ T6223] veth0_vlan: entered promiscuous mode [ 102.642531][ T6223] veth1_vlan: entered promiscuous mode [ 102.670051][ T6223] veth0_macvtap: entered promiscuous mode [ 102.676338][ T6223] veth1_macvtap: entered promiscuous mode [ 102.693144][ T6223] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.701909][ T6223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.712037][ T103] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.715709][ T103] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.721003][ T1147] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.724706][ T1147] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.846058][ T1160] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.988323][ T1160] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.121146][ T1160] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.208467][ T1160] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/01/02 15:20:07 executed programs: 0 [ 104.204771][ T5290] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 104.209416][ T5290] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 104.213702][ T5290] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 104.219024][ T5290] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 104.222943][ T5290] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 104.382349][ T6348] chnl_net:caif_netlink_parms(): no params data found [ 104.503956][ T6348] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.508925][ T6348] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.512339][ T6348] bridge_slave_0: entered allmulticast mode [ 104.516761][ T6348] bridge_slave_0: entered promiscuous mode [ 104.522344][ T6348] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.526150][ T6348] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.530099][ T6348] bridge_slave_1: entered allmulticast mode [ 104.534337][ T6348] bridge_slave_1: entered promiscuous mode [ 104.564058][ T6348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.571442][ T6348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.599523][ T6348] team0: Port device team_slave_0 added [ 104.605311][ T6348] team0: Port device team_slave_1 added [ 104.629819][ T6348] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.632827][ T6348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.641867][ T6348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.647927][ T6348] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.651126][ T6348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.662510][ T6348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.703533][ T6348] hsr_slave_0: entered promiscuous mode [ 104.707180][ T6348] hsr_slave_1: entered promiscuous mode [ 104.710862][ T6348] debugfs: 'hsr0' already exists in 'hsr' [ 104.713084][ T6348] Cannot create hsr debugfs directory [ 105.766530][ T1160] bridge_slave_1: left allmulticast mode [ 105.768577][ T1160] bridge_slave_1: left promiscuous mode [ 105.770473][ T1160] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.776361][ T1160] bridge_slave_0: left allmulticast mode [ 105.779309][ T1160] bridge_slave_0: left promiscuous mode [ 105.781561][ T1160] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.968580][ T1160] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.973307][ T1160] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.977809][ T1160] bond0 (unregistering): Released all slaves [ 106.113223][ T1160] hsr_slave_0: left promiscuous mode [ 106.116374][ T1160] hsr_slave_1: left promiscuous mode [ 106.119376][ T1160] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.122575][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.125993][ T1160] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.129065][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.142379][ T1160] veth1_macvtap: left promiscuous mode [ 106.144347][ T1160] veth0_macvtap: left promiscuous mode [ 106.147683][ T1160] veth1_vlan: left promiscuous mode [ 106.149895][ T1160] veth0_vlan: left promiscuous mode [ 106.287431][ T5290] Bluetooth: hci0: command tx timeout [ 106.445628][ T1160] team0 (unregistering): Port device team_slave_1 removed [ 106.464108][ T1160] team0 (unregistering): Port device team_slave_0 removed [ 107.012007][ T6348] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 107.024203][ T6348] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 107.029825][ T6348] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 107.034829][ T6348] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 107.091292][ T6348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.101711][ T6348] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.106949][ T103] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.109315][ T103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.124237][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.127575][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.491805][ T6348] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.534080][ T6348] veth0_vlan: entered promiscuous mode [ 107.540395][ T6348] veth1_vlan: entered promiscuous mode [ 107.569107][ T6348] veth0_macvtap: entered promiscuous mode [ 107.573960][ T6348] veth1_macvtap: entered promiscuous mode [ 107.601218][ T6348] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.608985][ T6348] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.615393][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.619278][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.623112][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.626102][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.673601][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.677013][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.697949][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.700709][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.735298][ T40] audit: type=1400 audit(1767367210.960:127): avc: denied { prog_load } for pid=6389 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 107.742932][ T40] audit: type=1400 audit(1767367210.960:128): avc: denied { bpf } for pid=6389 comm="syz.0.17" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 107.750648][ T40] audit: type=1400 audit(1767367210.960:129): avc: denied { map_create } for pid=6389 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 107.757332][ T40] audit: type=1400 audit(1767367210.970:130): avc: denied { map_read map_write } for pid=6389 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 107.763722][ T40] audit: type=1400 audit(1767367210.970:131): avc: denied { perfmon } for pid=6389 comm="syz.0.17" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 107.771109][ T40] audit: type=1400 audit(1767367210.970:132): avc: denied { prog_run } for pid=6389 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 107.778157][ T40] audit: type=1400 audit(1767367210.970:133): avc: denied { name_bind } for pid=6389 comm="syz.0.17" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 107.853262][ T6391] ------------[ cut here ]------------ [ 107.855904][ T6391] WARNING: net/core/skbuff.c:7243 at skb_attempt_defer_free+0x641/0x710, CPU#1: syz.0.17/6391 [ 107.860095][ T6391] Modules linked in: [ 107.861975][ T6391] CPU: 1 UID: 0 PID: 6391 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 107.866026][ T6391] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 107.871159][ T6391] RIP: 0010:skb_attempt_defer_free+0x641/0x710 [ 107.873719][ T6391] Code: 74 e6 f8 e9 5d ff ff ff e8 1c 9f 7c f8 90 0f 0b 90 e9 f0 fc ff ff e8 0e 9f 7c f8 90 0f 0b 90 e9 74 fc ff ff e8 00 9f 7c f8 90 <0f> 0b 90 e9 95 fc ff ff e8 f2 9e 7c f8 90 0f 0b 90 48 b8 00 00 00 [ 107.882635][ T6391] RSP: 0018:ffffc900035df5a8 EFLAGS: 00010293 [ 107.885373][ T6391] RAX: 0000000000000000 RBX: ffff8880323c03c0 RCX: ffffffff89424625 [ 107.888800][ T6391] RDX: ffff88803370a4c0 RSI: ffffffff894249c0 RDI: ffff8880323c0420 [ 107.892006][ T6391] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000001 [ 107.894956][ T6391] R10: 0000000000000000 R11: ffff88803370aff0 R12: 0000000000000000 [ 107.898130][ T6391] R13: 1ffff920006bbeb9 R14: 0000000000000000 R15: ffff8880323c0418 [ 107.901559][ T6391] FS: 00007f88135946c0(0000) GS:ffff8880d69f5000(0000) knlGS:0000000000000000 [ 107.905192][ T6391] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 107.908197][ T6391] CR2: 00007f8813594d58 CR3: 0000000025877000 CR4: 0000000000352ef0 [ 107.911753][ T6391] Call Trace: [ 107.913161][ T6391] [ 107.914387][ T6391] ? __pfx__copy_to_iter+0x10/0x10 [ 107.916604][ T6391] ? __pfx_skb_attempt_defer_free+0x10/0x10 [ 107.918692][ T6391] ? __lock_acquire+0x436/0x2890 [ 107.920737][ T6391] skb_consume_udp+0x19f/0x250 [ 107.922997][ T6391] udp_recvmsg+0x6c7/0x1350 [ 107.925218][ T6391] ? __pfx_udp_recvmsg+0x10/0x10 [ 107.927976][ T6391] ? find_held_lock+0x2b/0x80 [ 107.930402][ T6391] sk_udp_recvmsg+0x9b/0x120 [ 107.932421][ T6391] udp_bpf_recvmsg+0x5c0/0xe40 [ 107.934391][ T6391] ? trace_mm_page_alloc+0x11b/0x180 [ 107.936661][ T6391] ? __pfx_udp_bpf_recvmsg+0x10/0x10 [ 107.938785][ T6391] ? sock_has_perm+0x258/0x2f0 [ 107.940757][ T6391] ? __pfx_sock_has_perm+0x10/0x10 [ 107.942780][ T6391] ? __pfx_udp_bpf_recvmsg+0x10/0x10 [ 107.944948][ T6391] inet_recvmsg+0x625/0x6a0 [ 107.947408][ T6391] ? __pfx_inet_recvmsg+0x10/0x10 [ 107.950071][ T6391] sock_recvmsg+0x1b2/0x250 [ 107.952090][ T6391] ____sys_recvmsg+0x218/0x6b0 [ 107.954142][ T6391] ? __pfx_____sys_recvmsg+0x10/0x10 [ 107.956407][ T6391] ? __lock_acquire+0x436/0x2890 [ 107.958599][ T6391] ___sys_recvmsg+0x114/0x1a0 [ 107.961097][ T6391] ? __pfx____sys_recvmsg+0x10/0x10 [ 107.963341][ T6391] ? find_held_lock+0x2b/0x80 [ 107.965392][ T6391] do_recvmmsg+0x2fe/0x750 [ 107.967684][ T6391] ? __pfx_do_recvmmsg+0x10/0x10 [ 107.970049][ T6391] ? find_held_lock+0x2b/0x80 [ 107.972340][ T6391] __x64_sys_recvmmsg+0x22a/0x280 [ 107.974442][ T6391] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 107.976829][ T6391] do_syscall_64+0xcd/0xf80 [ 107.978410][ T6391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.981154][ T6391] RIP: 0033:0x7f881278f7c9 [ 107.983547][ T6391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.991624][ T6391] RSP: 002b:00007f8813594038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 107.994700][ T6391] RAX: ffffffffffffffda RBX: 00007f88129e6090 RCX: 00007f881278f7c9 [ 107.997665][ T6391] RDX: 0000000000000001 RSI: 00002000000047c0 RDI: 0000000000000003 [ 108.000557][ T6391] RBP: 00007f8812813f91 R08: 0000000000000000 R09: 0000000000000000 [ 108.003893][ T6391] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 108.007732][ T6391] R13: 00007f88129e6128 R14: 00007f88129e6090 R15: 00007ffc31afb068 [ 108.010879][ T6391] [ 108.012059][ T6391] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 108.014295][ T6391] CPU: 1 UID: 0 PID: 6391 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 108.017021][ T6391] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 108.020229][ T6391] Call Trace: [ 108.021711][ T6391] [ 108.022798][ T6391] dump_stack_lvl+0x3d/0x1f0 [ 108.024282][ T6391] vpanic+0x640/0x6f0 [ 108.025463][ T6391] ? skb_attempt_defer_free+0x641/0x710 [ 108.027446][ T6391] panic+0xca/0xd0 [ 108.028844][ T6391] ? __pfx_panic+0x10/0x10 [ 108.030808][ T6391] ? check_panic_on_warn+0x1f/0xb0 [ 108.032899][ T6391] check_panic_on_warn+0xab/0xb0 [ 108.034476][ T6391] __warn+0x108/0x3c0 [ 108.035801][ T6391] __report_bug+0x2a0/0x520 [ 108.037292][ T6391] ? skb_attempt_defer_free+0x641/0x710 [ 108.038948][ T6391] ? __pfx___report_bug+0x10/0x10 [ 108.040449][ T6391] ? __lock_acquire+0x436/0x2890 [ 108.042327][ T6391] ? skb_attempt_defer_free+0x641/0x710 [ 108.044047][ T6391] report_bug+0xb2/0x220 [ 108.045885][ T6391] ? skb_attempt_defer_free+0x641/0x710 [ 108.048085][ T6391] handle_bug+0x127/0x260 [ 108.049470][ T6391] exc_invalid_op+0x17/0x50 [ 108.050857][ T6391] asm_exc_invalid_op+0x1a/0x20 [ 108.052812][ T6391] RIP: 0010:skb_attempt_defer_free+0x641/0x710 [ 108.054624][ T6391] Code: 74 e6 f8 e9 5d ff ff ff e8 1c 9f 7c f8 90 0f 0b 90 e9 f0 fc ff ff e8 0e 9f 7c f8 90 0f 0b 90 e9 74 fc ff ff e8 00 9f 7c f8 90 <0f> 0b 90 e9 95 fc ff ff e8 f2 9e 7c f8 90 0f 0b 90 48 b8 00 00 00 [ 108.060164][ T6391] RSP: 0018:ffffc900035df5a8 EFLAGS: 00010293 [ 108.061929][ T6391] RAX: 0000000000000000 RBX: ffff8880323c03c0 RCX: ffffffff89424625 [ 108.064161][ T6391] RDX: ffff88803370a4c0 RSI: ffffffff894249c0 RDI: ffff8880323c0420 [ 108.066445][ T6391] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000001 [ 108.068827][ T6391] R10: 0000000000000000 R11: ffff88803370aff0 R12: 0000000000000000 [ 108.071452][ T6391] R13: 1ffff920006bbeb9 R14: 0000000000000000 R15: ffff8880323c0418 [ 108.073937][ T6391] ? skb_attempt_defer_free+0x2a5/0x710 [ 108.075699][ T6391] ? skb_attempt_defer_free+0x640/0x710 [ 108.077451][ T6391] ? skb_attempt_defer_free+0x640/0x710 [ 108.079057][ T6391] ? __pfx__copy_to_iter+0x10/0x10 [ 108.080787][ T6391] ? __pfx_skb_attempt_defer_free+0x10/0x10 [ 108.082832][ T6391] ? __lock_acquire+0x436/0x2890 [ 108.084463][ T6391] skb_consume_udp+0x19f/0x250 [ 108.085989][ T6391] udp_recvmsg+0x6c7/0x1350 [ 108.087652][ T6391] ? __pfx_udp_recvmsg+0x10/0x10 [ 108.089337][ T6391] ? find_held_lock+0x2b/0x80 [ 108.090838][ T6391] sk_udp_recvmsg+0x9b/0x120 [ 108.092181][ T6391] udp_bpf_recvmsg+0x5c0/0xe40 [ 108.093611][ T6391] ? trace_mm_page_alloc+0x11b/0x180 [ 108.095246][ T6391] ? __pfx_udp_bpf_recvmsg+0x10/0x10 [ 108.097022][ T6391] ? sock_has_perm+0x258/0x2f0 [ 108.098450][ T6391] ? __pfx_sock_has_perm+0x10/0x10 [ 108.099934][ T6391] ? __pfx_udp_bpf_recvmsg+0x10/0x10 [ 108.101470][ T6391] inet_recvmsg+0x625/0x6a0 [ 108.103073][ T6391] ? __pfx_inet_recvmsg+0x10/0x10 [ 108.104880][ T6391] sock_recvmsg+0x1b2/0x250 [ 108.106470][ T6391] ____sys_recvmsg+0x218/0x6b0 [ 108.108045][ T6391] ? __pfx_____sys_recvmsg+0x10/0x10 [ 108.109752][ T6391] ? __lock_acquire+0x436/0x2890 [ 108.111253][ T6391] ___sys_recvmsg+0x114/0x1a0 [ 108.112690][ T6391] ? __pfx____sys_recvmsg+0x10/0x10 [ 108.114209][ T6391] ? find_held_lock+0x2b/0x80 [ 108.115595][ T6391] do_recvmmsg+0x2fe/0x750 [ 108.116914][ T6391] ? __pfx_do_recvmmsg+0x10/0x10 [ 108.118322][ T6391] ? find_held_lock+0x2b/0x80 [ 108.119706][ T6391] __x64_sys_recvmmsg+0x22a/0x280 [ 108.121506][ T6391] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 108.123285][ T6391] do_syscall_64+0xcd/0xf80 [ 108.124922][ T6391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.126665][ T6391] RIP: 0033:0x7f881278f7c9 [ 108.127971][ T6391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.133486][ T6391] RSP: 002b:00007f8813594038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 108.135971][ T6391] RAX: ffffffffffffffda RBX: 00007f88129e6090 RCX: 00007f881278f7c9 [ 108.138355][ T6391] RDX: 0000000000000001 RSI: 00002000000047c0 RDI: 0000000000000003 [ 108.140667][ T6391] RBP: 00007f8812813f91 R08: 0000000000000000 R09: 0000000000000000 [ 108.143242][ T6391] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 108.145895][ T6391] R13: 00007f88129e6128 R14: 00007f88129e6090 R15: 00007ffc31afb068 [ 108.148545][ T6391] [ 108.150333][ T6391] Kernel Offset: disabled [ 108.151858][ T6391] Rebooting in 86400 seconds..