syzkaller login: [ 91.857619][ T54] cfg80211: failed to load regulatory.db Warning: Permanently added '[localhost]:41293' (ED25519) to the list of known hosts. 2025/09/25 09:17:10 parsed 1 programs [ 122.099134][ T5362] cgroup: Unknown subsys name 'net' [ 122.171800][ T5362] cgroup: Unknown subsys name 'cpuset' [ 122.178847][ T5362] cgroup: Unknown subsys name 'rlimit' [ 123.846829][ T5362] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 128.173675][ T5376] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 129.698255][ T5397] chnl_net:caif_netlink_parms(): no params data found [ 129.767755][ T5397] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.771956][ T5397] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.775285][ T5397] bridge_slave_0: entered allmulticast mode [ 129.780090][ T5397] bridge_slave_0: entered promiscuous mode [ 129.786136][ T5397] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.791280][ T5397] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.794639][ T5397] bridge_slave_1: entered allmulticast mode [ 129.798883][ T5397] bridge_slave_1: entered promiscuous mode [ 129.824758][ T5397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.831281][ T5397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.858952][ T5397] team0: Port device team_slave_0 added [ 129.863729][ T5397] team0: Port device team_slave_1 added [ 129.889582][ T5397] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.892660][ T5397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.905109][ T5397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.912814][ T5397] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.915673][ T5397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.928340][ T5397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.966772][ T5397] hsr_slave_0: entered promiscuous mode [ 129.970704][ T5397] hsr_slave_1: entered promiscuous mode [ 130.123742][ T5397] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 130.132978][ T5397] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 130.140469][ T5397] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 130.149364][ T5397] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 130.186873][ T5397] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.190265][ T5397] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.194308][ T5397] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.197696][ T5397] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.259238][ T5397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.274743][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.281277][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.294165][ T5397] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.304458][ T1047] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.307632][ T1047] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.320374][ T1047] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.323892][ T1047] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.540629][ T5397] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.581788][ T5397] veth0_vlan: entered promiscuous mode [ 130.592594][ T5397] veth1_vlan: entered promiscuous mode [ 130.621803][ T5397] veth0_macvtap: entered promiscuous mode [ 130.629424][ T5397] veth1_macvtap: entered promiscuous mode [ 130.646460][ T5397] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.659261][ T5397] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.671639][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.675424][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.689330][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.693087][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.849959][ T3003] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.902372][ T3003] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.974231][ T3003] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.064626][ T3003] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.548106][ T5446] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 132.554078][ T5446] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 132.558597][ T5446] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 132.562044][ T5446] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 132.565933][ T5446] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 133.245488][ T3003] bridge_slave_1: left allmulticast mode [ 133.254625][ T3003] bridge_slave_1: left promiscuous mode [ 133.278186][ T3003] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.373593][ T3003] bridge_slave_0: left allmulticast mode [ 133.375922][ T3003] bridge_slave_0: left promiscuous mode [ 133.390269][ T3003] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.853728][ T3003] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 133.861233][ T3003] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 133.866086][ T3003] bond0 (unregistering): Released all slaves [ 133.968375][ T3003] hsr_slave_0: left promiscuous mode [ 133.979444][ T3003] hsr_slave_1: left promiscuous mode [ 133.982309][ T3003] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.985296][ T3003] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.998586][ T3003] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.001782][ T3003] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.031602][ T3003] veth1_macvtap: left promiscuous mode [ 134.034026][ T3003] veth0_macvtap: left promiscuous mode [ 134.037303][ T3003] veth1_vlan: left promiscuous mode [ 134.057234][ T3003] veth0_vlan: left promiscuous mode [ 134.483481][ T3003] team0 (unregistering): Port device team_slave_1 removed [ 134.506324][ T3003] team0 (unregistering): Port device team_slave_0 removed [ 135.684393][ T1040] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.707189][ T1040] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.914640][ T1037] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.919192][ T1037] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/09/25 09:17:27 executed programs: 0 [ 137.055072][ T4702] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 137.059383][ T4702] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 137.063127][ T4702] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 137.070614][ T4702] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 137.074164][ T4702] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 137.265347][ T5501] chnl_net:caif_netlink_parms(): no params data found [ 137.346482][ T5501] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.350594][ T5501] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.354096][ T5501] bridge_slave_0: entered allmulticast mode [ 137.358662][ T5501] bridge_slave_0: entered promiscuous mode [ 137.363626][ T5501] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.366870][ T5501] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.371699][ T5501] bridge_slave_1: entered allmulticast mode [ 137.375542][ T5501] bridge_slave_1: entered promiscuous mode [ 137.401745][ T5501] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.409774][ T5501] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.443811][ T5501] team0: Port device team_slave_0 added [ 137.454367][ T5501] team0: Port device team_slave_1 added [ 137.477908][ T5501] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.484195][ T5501] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.504294][ T5501] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.510903][ T5501] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.513860][ T5501] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.525613][ T5501] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 137.561643][ T5501] hsr_slave_0: entered promiscuous mode [ 137.564741][ T5501] hsr_slave_1: entered promiscuous mode [ 137.932654][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.935737][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.097910][ T5501] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 138.105406][ T5501] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 138.121672][ T5501] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 138.139601][ T5501] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 138.290240][ T5501] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.321448][ T5501] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.352779][ T3003] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.355884][ T3003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.388815][ T3003] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.392034][ T3003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.461155][ T5501] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 138.739118][ T5501] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.802804][ T5501] veth0_vlan: entered promiscuous mode [ 138.831091][ T5501] veth1_vlan: entered promiscuous mode [ 138.876195][ T5501] veth0_macvtap: entered promiscuous mode [ 138.903145][ T5501] veth1_macvtap: entered promiscuous mode [ 138.930522][ T5501] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.944271][ T5501] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 138.966154][ T1047] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.995697][ T1047] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.004310][ T1047] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.025006][ T1047] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.100238][ T3003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.103630][ T3003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.131274][ T4702] Bluetooth: hci0: command tx timeout [ 139.173823][ T3003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.178577][ T3003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.291315][ T5544] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 139.298941][ T5544] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 139.319318][ T5544] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 139.330149][ T10] wlan1: No basic rates, using min rate instead [ 139.334828][ T10] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 139.348464][ T10] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 139.470045][ T1040] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 139.587646][ T1040] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 139.699072][ T1040] wlan1: authentication with 08:02:11:00:00:00 timed out [ 139.882161][ T5559] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 139.898264][ T5559] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 139.904811][ T5559] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 139.910895][ T10] wlan1: No basic rates, using min rate instead [ 139.914523][ T10] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 139.932395][ T10] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 140.472374][ T5569] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 140.481012][ T1040] wlan1: authenticated [ 140.483213][ T54] wlan1: associating to AP 08:02:11:00:00:00 with corrupt probe response [ 140.488384][ T1040] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 140.494711][ T5569] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 140.501271][ T1040] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0xa004 status=0 aid=12) [ 140.505588][ T5569] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 140.510610][ T1040] wlan1: No basic rates, using min rate instead [ 140.514536][ T1040] wlan1: associated [ 140.519794][ T5569] ------------[ cut here ]------------ [ 140.522225][ T5569] WARNING: CPU: 0 PID: 5569 at net/mac80211/tdls.c:1461 ieee80211_tdls_oper+0x38f/0x680 [ 140.526321][ T5569] Modules linked in: [ 140.528435][ T5569] CPU: 0 UID: 0 PID: 5569 Comm: syz.0.19 Not tainted syzkaller #0 PREEMPT(full) [ 140.533122][ T5569] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 140.538018][ T5569] RIP: 0010:ieee80211_tdls_oper+0x38f/0x680 [ 140.540661][ T5569] Code: 6f 01 00 00 e8 a2 e0 b1 f6 eb 22 e8 9b e0 b1 f6 4c 89 e2 eb 21 e8 91 e0 b1 f6 b8 bd ff ff ff e9 21 fe ff ff e8 82 e0 b1 f6 90 <0f> 0b 90 4c 8b 7c 24 08 48 8b 14 24 4d 8d a7 2a 1d 00 00 4c 89 e0 [ 140.549015][ T5569] RSP: 0018:ffffc9000caa7320 EFLAGS: 00010293 [ 140.551586][ T5569] RAX: ffffffff8b0ddcbe RBX: dffffc0000000000 RCX: ffff888032f20000 [ 140.555093][ T5569] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 140.558749][ T5569] RBP: 0000000000000000 R08: ffff888011f50187 R09: 1ffff110023ea030 [ 140.562023][ T5569] R10: dffffc0000000000 R11: ffffed10023ea031 R12: ffff88804e3e5d2e [ 140.565462][ T5569] R13: ffff88804e3e4d80 R14: 1ffff11009c7cae4 R15: 0000000000000000 [ 140.569200][ T5569] FS: 0000555560f3b500(0000) GS:ffff88808d007000(0000) knlGS:0000000000000000 [ 140.573168][ T5569] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 140.576114][ T5569] CR2: 000000c008670000 CR3: 00000000440e0000 CR4: 0000000000352ef0 [ 140.579690][ T5569] Call Trace: [ 140.581151][ T5569] [ 140.582513][ T5569] nl80211_tdls_oper+0x285/0x440 [ 140.584674][ T5569] genl_family_rcv_msg_doit+0x215/0x300 [ 140.587154][ T5569] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 140.589915][ T5569] ? bpf_lsm_capable+0x9/0x20 [ 140.591970][ T5569] ? security_capable+0x7e/0x2e0 [ 140.594149][ T5569] genl_rcv_msg+0x60e/0x790 [ 140.596182][ T5569] ? __pfx_genl_rcv_msg+0x10/0x10 [ 140.598638][ T5569] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 140.600910][ T5569] ? __pfx_nl80211_tdls_oper+0x10/0x10 [ 140.603283][ T5569] ? __pfx_nl80211_post_doit+0x10/0x10 [ 140.605634][ T5569] ? __asan_memcpy+0x40/0x70 [ 140.607752][ T5569] ? __pfx_ref_tracker_free+0x10/0x10 [ 140.610093][ T5569] netlink_rcv_skb+0x205/0x470 [ 140.612202][ T5569] ? __lock_acquire+0xab9/0xd20 [ 140.614288][ T5569] ? __pfx_genl_rcv_msg+0x10/0x10 [ 140.616455][ T5569] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 140.619030][ T5569] ? down_read+0x1ad/0x2e0 [ 140.620961][ T5569] genl_rcv+0x28/0x40 [ 140.622746][ T5569] netlink_unicast+0x82f/0x9e0 [ 140.624816][ T5569] ? __pfx_netlink_unicast+0x10/0x10 [ 140.627382][ T5569] ? netlink_sendmsg+0x642/0xb30 [ 140.629623][ T5569] ? skb_put+0x11b/0x210 [ 140.631495][ T5569] netlink_sendmsg+0x805/0xb30 [ 140.633575][ T5569] ? __pfx_netlink_sendmsg+0x10/0x10 [ 140.635908][ T5569] ? aa_sock_msg_perm+0xf1/0x1d0 [ 140.638265][ T5569] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 140.640536][ T5569] ? __pfx_netlink_sendmsg+0x10/0x10 [ 140.642816][ T5569] __sock_sendmsg+0x21c/0x270 [ 140.644950][ T5569] ____sys_sendmsg+0x505/0x830 [ 140.647349][ T5569] ? __pfx_____sys_sendmsg+0x10/0x10 [ 140.649736][ T5569] ? import_iovec+0x74/0xa0 [ 140.651691][ T5569] ___sys_sendmsg+0x21f/0x2a0 [ 140.653737][ T5569] ? __pfx____sys_sendmsg+0x10/0x10 [ 140.655907][ T5569] ? futex_hash_put+0x4b/0x60 [ 140.657969][ T5569] ? futex_wake+0x4b2/0x560 [ 140.659923][ T5569] __x64_sys_sendmsg+0x19b/0x260 [ 140.661963][ T5569] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 140.664282][ T5569] ? do_syscall_64+0xbe/0x3b0 [ 140.666224][ T5569] do_syscall_64+0xfa/0x3b0 [ 140.668065][ T5569] ? lockdep_hardirqs_on+0x9c/0x150 [ 140.670249][ T5569] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.672861][ T5569] ? clear_bhb_loop+0x60/0xb0 [ 140.674884][ T5569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.677522][ T5569] RIP: 0033:0x7fdcac18eec9 [ 140.679454][ T5569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.687722][ T5569] RSP: 002b:00007ffe2622fcd8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 140.691318][ T5569] RAX: ffffffffffffffda RBX: 00007fdcac3e5fa0 RCX: 00007fdcac18eec9 [ 140.694642][ T5569] RDX: 0000000000000050 RSI: 0000200000000240 RDI: 0000000000000005 [ 140.698109][ T5569] RBP: 00007fdcac211f91 R08: 0000000000000000 R09: 0000000000000000 [ 140.701490][ T5569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.704953][ T5569] R13: 00007fdcac3e5fa0 R14: 00007fdcac3e5fa0 R15: 0000000000000003 [ 140.708349][ T5569] [ 140.709728][ T5569] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 140.712986][ T5569] CPU: 0 UID: 0 PID: 5569 Comm: syz.0.19 Not tainted syzkaller #0 PREEMPT(full) [ 140.716785][ T5569] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 140.721074][ T5569] Call Trace: [ 140.722566][ T5569] [ 140.723833][ T5569] dump_stack_lvl+0x99/0x250 [ 140.725798][ T5569] ? __asan_memcpy+0x40/0x70 [ 140.727794][ T5569] ? __pfx_dump_stack_lvl+0x10/0x10 [ 140.729998][ T5569] ? __pfx__printk+0x10/0x10 [ 140.731998][ T5569] vpanic+0x281/0x750 [ 140.733741][ T5569] ? __pfx__printk+0x10/0x10 [ 140.735722][ T5569] ? __pfx_vpanic+0x10/0x10 [ 140.737640][ T5569] ? is_bpf_text_address+0x26/0x2b0 [ 140.739926][ T5569] panic+0xb9/0xc0 [ 140.741609][ T5569] ? __pfx_panic+0x10/0x10 [ 140.743580][ T5569] __warn+0x31b/0x4b0 [ 140.745390][ T5569] ? ieee80211_tdls_oper+0x38f/0x680 [ 140.747882][ T5569] ? ieee80211_tdls_oper+0x38f/0x680 [ 140.750641][ T5569] report_bug+0x2be/0x4f0 [ 140.752489][ T5569] ? ieee80211_tdls_oper+0x38f/0x680 [ 140.754930][ T5569] ? ieee80211_tdls_oper+0x38f/0x680 [ 140.757173][ T5569] ? ieee80211_tdls_oper+0x391/0x680 [ 140.759501][ T5569] handle_bug+0x84/0x160 [ 140.761364][ T5569] exc_invalid_op+0x1a/0x50 [ 140.763366][ T5569] asm_exc_invalid_op+0x1a/0x20 [ 140.765525][ T5569] RIP: 0010:ieee80211_tdls_oper+0x38f/0x680 [ 140.768004][ T5569] Code: 6f 01 00 00 e8 a2 e0 b1 f6 eb 22 e8 9b e0 b1 f6 4c 89 e2 eb 21 e8 91 e0 b1 f6 b8 bd ff ff ff e9 21 fe ff ff e8 82 e0 b1 f6 90 <0f> 0b 90 4c 8b 7c 24 08 48 8b 14 24 4d 8d a7 2a 1d 00 00 4c 89 e0 [ 140.776232][ T5569] RSP: 0018:ffffc9000caa7320 EFLAGS: 00010293 [ 140.778824][ T5569] RAX: ffffffff8b0ddcbe RBX: dffffc0000000000 RCX: ffff888032f20000 [ 140.782139][ T5569] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 140.785764][ T5569] RBP: 0000000000000000 R08: ffff888011f50187 R09: 1ffff110023ea030 [ 140.789237][ T5569] R10: dffffc0000000000 R11: ffffed10023ea031 R12: ffff88804e3e5d2e [ 140.792609][ T5569] R13: ffff88804e3e4d80 R14: 1ffff11009c7cae4 R15: 0000000000000000 [ 140.796137][ T5569] ? ieee80211_tdls_oper+0x38e/0x680 [ 140.798411][ T5569] nl80211_tdls_oper+0x285/0x440 [ 140.800535][ T5569] genl_family_rcv_msg_doit+0x215/0x300 [ 140.803002][ T5569] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 140.805610][ T5569] ? bpf_lsm_capable+0x9/0x20 [ 140.807631][ T5569] ? security_capable+0x7e/0x2e0 [ 140.809772][ T5569] genl_rcv_msg+0x60e/0x790 [ 140.811808][ T5569] ? __pfx_genl_rcv_msg+0x10/0x10 [ 140.813997][ T5569] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 140.816319][ T5569] ? __pfx_nl80211_tdls_oper+0x10/0x10 [ 140.818653][ T5569] ? __pfx_nl80211_post_doit+0x10/0x10 [ 140.821007][ T5569] ? __asan_memcpy+0x40/0x70 [ 140.823076][ T5569] ? __pfx_ref_tracker_free+0x10/0x10 [ 140.825759][ T5569] netlink_rcv_skb+0x205/0x470 [ 140.827914][ T5569] ? __lock_acquire+0xab9/0xd20 [ 140.829999][ T5569] ? __pfx_genl_rcv_msg+0x10/0x10 [ 140.832076][ T5569] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 140.834218][ T5569] ? down_read+0x1ad/0x2e0 [ 140.836117][ T5569] genl_rcv+0x28/0x40 [ 140.837808][ T5569] netlink_unicast+0x82f/0x9e0 [ 140.839978][ T5569] ? __pfx_netlink_unicast+0x10/0x10 [ 140.842441][ T5569] ? netlink_sendmsg+0x642/0xb30 [ 140.844893][ T5569] ? skb_put+0x11b/0x210 [ 140.846724][ T5569] netlink_sendmsg+0x805/0xb30 [ 140.848786][ T5569] ? __pfx_netlink_sendmsg+0x10/0x10 [ 140.851088][ T5569] ? aa_sock_msg_perm+0xf1/0x1d0 [ 140.853285][ T5569] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 140.855491][ T5569] ? __pfx_netlink_sendmsg+0x10/0x10 [ 140.857740][ T5569] __sock_sendmsg+0x21c/0x270 [ 140.859723][ T5569] ____sys_sendmsg+0x505/0x830 [ 140.861718][ T5569] ? __pfx_____sys_sendmsg+0x10/0x10 [ 140.864023][ T5569] ? import_iovec+0x74/0xa0 [ 140.865976][ T5569] ___sys_sendmsg+0x21f/0x2a0 [ 140.867999][ T5569] ? __pfx____sys_sendmsg+0x10/0x10 [ 140.870305][ T5569] ? futex_hash_put+0x4b/0x60 [ 140.872263][ T5569] ? futex_wake+0x4b2/0x560 [ 140.874114][ T5569] __x64_sys_sendmsg+0x19b/0x260 [ 140.876127][ T5569] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 140.878367][ T5569] ? do_syscall_64+0xbe/0x3b0 [ 140.880492][ T5569] do_syscall_64+0xfa/0x3b0 [ 140.882506][ T5569] ? lockdep_hardirqs_on+0x9c/0x150 [ 140.884711][ T5569] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.887387][ T5569] ? clear_bhb_loop+0x60/0xb0 [ 140.889335][ T5569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.891831][ T5569] RIP: 0033:0x7fdcac18eec9 [ 140.893777][ T5569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.901246][ T5569] RSP: 002b:00007ffe2622fcd8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 140.904469][ T5569] RAX: ffffffffffffffda RBX: 00007fdcac3e5fa0 RCX: 00007fdcac18eec9 [ 140.907590][ T5569] RDX: 0000000000000050 RSI: 0000200000000240 RDI: 0000000000000005 [ 140.910893][ T5569] RBP: 00007fdcac211f91 R08: 0000000000000000 R09: 0000000000000000 [ 140.914245][ T5569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.917533][ T5569] R13: 00007fdcac3e5fa0 R14: 00007fdcac3e5fa0 R15: 0000000000000003 [ 140.920751][ T5569] [ 140.922490][ T5569] Kernel Offset: disabled [ 140.924407][ T5569] Rebooting in 86400 seconds.. VM DIAGNOSIS: 09:17:31 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000035 RBX=0000000000000035 RCX=0000000000000000 RDX=00000000000003f8 RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000caa6ad0 R8 =ffff888033f50237 R9 =1ffff110067ea046 R10=dffffc0000000000 R11=ffffffff85513de0 R12=dffffc0000000000 R13=ffffffff99d0e8c8 R14=ffffffff9a003860 R15=0000000000000000 RIP=ffffffff85513e5c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555560f3b500 ffffffff 00c00000 GS =0000 ffff88808d007000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000c008670000 CR3=00000000440e0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000ffffff80 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 01000c0000a00400 2000000011020800 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe26230136 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe26230136 00007ffe2623013c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdcac212fbe ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdcac212fcb ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdcac212fc5 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdcac212fd9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdcac21305f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdcac21313d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001000c ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000b000700080006 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0202060000010064 0000000000000000 0000000000110208 ffffffffffff0100 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000