[ 44.084872][ T40] audit: type=1400 audit(1764317021.289:61): avc: denied { siginh } for pid=5845 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:1865' (ED25519) to the list of known hosts. [ 50.675521][ T40] audit: type=1400 audit(1764317027.909:62): avc: denied { execute } for pid=5930 comm="sh" name="syz-execprog" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 50.684134][ T40] audit: type=1400 audit(1764317027.909:63): avc: denied { execute_no_trans } for pid=5930 comm="sh" path="/syz-execprog" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 2025/11/28 08:03:49 parsed 1 programs [ 51.801573][ T40] audit: type=1400 audit(1764317029.029:64): avc: denied { write } for pid=5930 comm="syz-execprog" path="pipe:[7262]" dev="pipefs" ino=7262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 51.808959][ T40] audit: type=1400 audit(1764317029.029:65): avc: denied { node_bind } for pid=5930 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 53.694105][ T40] audit: type=1400 audit(1764317030.929:66): avc: denied { mounton } for pid=5939 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 53.703551][ T40] audit: type=1400 audit(1764317030.929:67): avc: denied { mount } for pid=5939 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 53.705231][ T5939] cgroup: Unknown subsys name 'net' [ 53.715292][ T40] audit: type=1400 audit(1764317030.949:68): avc: denied { unmount } for pid=5939 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 53.828212][ T5939] cgroup: Unknown subsys name 'cpuset' [ 53.832869][ T5939] cgroup: Unknown subsys name 'rlimit' [ 54.028396][ T40] audit: type=1400 audit(1764317031.259:69): avc: denied { setattr } for pid=5939 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 54.037183][ T40] audit: type=1400 audit(1764317031.259:70): avc: denied { create } for pid=5939 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 54.045538][ T40] audit: type=1400 audit(1764317031.259:71): avc: denied { write } for pid=5939 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 54.074671][ T5943] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 54.737431][ T5939] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 56.244742][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 56.244757][ T40] audit: type=1400 audit(1764317033.479:80): avc: denied { execmem } for pid=5947 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 56.254062][ T40] audit: type=1400 audit(1764317033.479:81): avc: denied { read } for pid=5948 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 56.261114][ T40] audit: type=1400 audit(1764317033.479:82): avc: denied { open } for pid=5948 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 56.269259][ T40] audit: type=1400 audit(1764317033.479:83): avc: denied { mounton } for pid=5948 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 56.293891][ T40] audit: type=1400 audit(1764317033.529:84): avc: denied { mount } for pid=5948 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 56.303574][ T40] audit: type=1400 audit(1764317033.529:85): avc: denied { mounton } for pid=5948 comm="syz-executor" path="/syzkaller.gQzXBW/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 56.314134][ T40] audit: type=1400 audit(1764317033.539:86): avc: denied { mount } for pid=5948 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 56.323128][ T40] audit: type=1400 audit(1764317033.539:87): avc: denied { mounton } for pid=5948 comm="syz-executor" path="/syzkaller.gQzXBW/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 56.334289][ T40] audit: type=1400 audit(1764317033.539:88): avc: denied { mounton } for pid=5948 comm="syz-executor" path="/syzkaller.gQzXBW/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=5967 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 56.345101][ T40] audit: type=1400 audit(1764317033.539:89): avc: denied { unmount } for pid=5948 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 56.356773][ T5948] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 57.374264][ T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 57.378033][ T64] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 57.381474][ T64] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 57.384830][ T64] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 57.387677][ T64] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 57.951823][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.955182][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.970301][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.973559][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.129004][ T6003] chnl_net:caif_netlink_parms(): no params data found [ 58.189816][ T6003] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.192560][ T6003] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.196154][ T6003] bridge_slave_0: entered allmulticast mode [ 58.198989][ T6003] bridge_slave_0: entered promiscuous mode [ 58.202999][ T6003] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.205523][ T6003] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.207806][ T6003] bridge_slave_1: entered allmulticast mode [ 58.210439][ T6003] bridge_slave_1: entered promiscuous mode [ 58.229363][ T6003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.236264][ T6003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.261105][ T6003] team0: Port device team_slave_0 added [ 58.266100][ T6003] team0: Port device team_slave_1 added [ 58.284183][ T6003] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.286421][ T6003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.294754][ T6003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.299850][ T6003] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.302044][ T6003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.310166][ T6003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.346143][ T6003] hsr_slave_0: entered promiscuous mode [ 58.348402][ T6003] hsr_slave_1: entered promiscuous mode [ 58.451552][ T6003] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 58.457794][ T6003] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 58.462532][ T6003] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 58.467017][ T6003] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 58.497881][ T6003] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.500207][ T6003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.503048][ T6003] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.505425][ T6003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.535076][ T6003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.544773][ T1146] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.548312][ T1146] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.560271][ T6003] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.576906][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.579232][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.585081][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.587405][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.701553][ T6003] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.731392][ T6003] veth0_vlan: entered promiscuous mode [ 58.736997][ T6003] veth1_vlan: entered promiscuous mode [ 58.751110][ T6003] veth0_macvtap: entered promiscuous mode [ 58.756151][ T6003] veth1_macvtap: entered promiscuous mode [ 58.765560][ T6003] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.771767][ T6003] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.779206][ T1146] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.782027][ T1146] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.787122][ T1146] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.789885][ T1146] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.901149][ T1146] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.995328][ T1146] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.044691][ T1146] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.118212][ T1146] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2025/11/28 08:03:56 executed programs: 0 [ 59.725100][ T5295] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 59.728258][ T5295] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 59.731140][ T5295] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 59.735103][ T5295] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 59.738333][ T5295] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 59.859456][ T6043] chnl_net:caif_netlink_parms(): no params data found [ 59.928117][ T6043] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.930982][ T6043] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.934103][ T6043] bridge_slave_0: entered allmulticast mode [ 59.937822][ T6043] bridge_slave_0: entered promiscuous mode [ 59.942635][ T6043] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.945761][ T6043] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.948877][ T6043] bridge_slave_1: entered allmulticast mode [ 59.952741][ T6043] bridge_slave_1: entered promiscuous mode [ 59.979891][ T6043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.984667][ T6043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.006463][ T6043] team0: Port device team_slave_0 added [ 60.010279][ T6043] team0: Port device team_slave_1 added [ 60.037437][ T6043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.039883][ T6043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.049373][ T6043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.055543][ T6043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.058303][ T6043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.068974][ T6043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.095234][ T6043] hsr_slave_0: entered promiscuous mode [ 60.097415][ T6043] hsr_slave_1: entered promiscuous mode [ 60.099402][ T6043] debugfs: 'hsr0' already exists in 'hsr' [ 60.101127][ T6043] Cannot create hsr debugfs directory [ 61.784210][ T5295] Bluetooth: hci0: command tx timeout [ 61.955527][ T1146] bridge_slave_1: left allmulticast mode [ 61.957636][ T1146] bridge_slave_1: left promiscuous mode [ 61.960273][ T1146] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.966595][ T1146] bridge_slave_0: left allmulticast mode [ 61.968435][ T1146] bridge_slave_0: left promiscuous mode [ 61.970325][ T1146] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.201762][ T1146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 62.206621][ T1146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 62.210165][ T1146] bond0 (unregistering): Released all slaves [ 62.226462][ T40] kauditd_printk_skb: 21 callbacks suppressed [ 62.226476][ T40] audit: type=1400 audit(1764317039.459:111): avc: denied { search } for pid=5647 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.236112][ T40] audit: type=1400 audit(1764317039.459:112): avc: denied { search } for pid=5647 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.242797][ T40] audit: type=1400 audit(1764317039.459:113): avc: denied { search } for pid=5647 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.268767][ T40] audit: type=1400 audit(1764317039.499:114): avc: denied { read open } for pid=6055 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.276790][ T40] audit: type=1400 audit(1764317039.499:115): avc: denied { getattr } for pid=6055 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.288525][ T40] audit: type=1400 audit(1764317039.529:116): avc: denied { add_name } for pid=6054 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.339927][ T40] audit: type=1400 audit(1764317039.569:117): avc: denied { remove_name } for pid=6057 comm="rm" name="resolv.conf.eth2.link" dev="tmpfs" ino=2112 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.347544][ T1146] hsr_slave_0: left promiscuous mode [ 62.350141][ T1146] hsr_slave_1: left promiscuous mode [ 62.352990][ T1146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.356269][ T1146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.360172][ T1146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.363124][ T1146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.381810][ T1146] veth1_macvtap: left promiscuous mode [ 62.385384][ T1146] veth0_macvtap: left promiscuous mode [ 62.387665][ T1146] veth1_vlan: left promiscuous mode [ 62.389381][ T1146] veth0_vlan: left promiscuous mode [ 62.577597][ T1146] team0 (unregistering): Port device team_slave_1 removed [ 62.595027][ T1146] team0 (unregistering): Port device team_slave_0 removed [ 63.047849][ T6043] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.055826][ T6043] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.062483][ T6043] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.069197][ T6043] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.112741][ T6043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.122716][ T6043] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.128155][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.130476][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.136571][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.138831][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.241637][ T6043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.339211][ T6043] veth0_vlan: entered promiscuous mode [ 63.350296][ T6043] veth1_vlan: entered promiscuous mode [ 63.372254][ T6043] veth0_macvtap: entered promiscuous mode [ 63.378349][ T6043] veth1_macvtap: entered promiscuous mode [ 63.390567][ T6043] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.400434][ T6043] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.414746][ T1146] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.418619][ T1146] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.435397][ T215] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.438979][ T215] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.496508][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.499219][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.527655][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.530620][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.574672][ T6085] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 63.583154][ T40] audit: type=1400 audit(1764317040.809:118): avc: denied { ioctl } for pid=6084 comm="syz.0.17" path="socket:[8509]" dev="sockfs" ino=8509 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 63.599954][ T6085] wlan1: No basic rates, using min rate instead [ 63.602468][ T6085] ------------[ cut here ]------------ [ 63.604428][ T6085] WARNING: CPU: 3 PID: 6085 at net/mac80211/mlme.c:1129 ieee80211_determine_chan_mode+0x13a0/0x41b0 [ 63.607666][ T6085] Modules linked in: [ 63.608934][ T6085] CPU: 3 UID: 0 PID: 6085 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 63.611758][ T6085] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 63.615565][ T6085] RIP: 0010:ieee80211_determine_chan_mode+0x13a0/0x41b0 [ 63.617657][ T6085] Code: 4c 24 08 ba 01 00 00 00 8b 41 04 83 f8 00 0f 47 c2 89 41 04 e9 da f6 ff ff 4d 89 e7 4c 8b a4 24 a0 00 00 00 e8 61 00 ce f6 90 <0f> 0b 90 e9 da fc ff ff e8 53 00 ce f6 90 0f 0b 90 e9 45 fa ff ff [ 63.623965][ T6085] RSP: 0018:ffffc9000413e6d0 EFLAGS: 00010293 [ 63.625830][ T6085] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffffffff8aeee63e [ 63.628280][ T6085] RDX: ffff888029858000 RSI: ffffffff8aeee77f RDI: 0000000000000005 [ 63.630733][ T6085] RBP: ffffed1009b74af6 R08: 0000000000000005 R09: 0000000000000000 [ 63.633158][ T6085] R10: 0000000000000000 R11: ffff888025dc3000 R12: 1ffff92000827cf7 [ 63.635938][ T6085] R13: ffffc9000413ea08 R14: ffffc9000413ea10 R15: ffff888025dc3000 [ 63.638314][ T6085] FS: 00007f6cc669e6c0(0000) GS:ffff8880d6d05000(0000) knlGS:0000000000000000 [ 63.640968][ T6085] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 63.643020][ T6085] CR2: 0000001b2e663fff CR3: 0000000053ab0000 CR4: 0000000000352ef0 [ 63.645752][ T6085] Call Trace: [ 63.646828][ T6085] [ 63.647757][ T6085] ? __pfx_prb_read_valid+0x10/0x10 [ 63.649369][ T6085] ? __pfx_ieee80211_determine_chan_mode+0x10/0x10 [ 63.651575][ T6085] ? __lock_acquire+0x622/0x1c90 [ 63.653116][ T6085] ieee80211_prep_channel+0x218/0x18c0 [ 63.655070][ T6085] ? __pfx_ieee80211_prep_channel+0x10/0x10 [ 63.656921][ T6085] ? ieee80211_mgd_setup_link_sta+0x521/0xaa0 [ 63.658867][ T6085] ? find_held_lock+0x2b/0x80 [ 63.660320][ T6085] ? ieee80211_prep_connection+0x606/0x1930 [ 63.662151][ T6085] ieee80211_prep_connection+0x6df/0x1930 [ 63.664191][ T6085] ieee80211_mgd_auth+0xdd3/0x19d0 [ 63.665765][ T6085] ? __pfx_ieee80211_mgd_auth+0x10/0x10 [ 63.667527][ T6085] ? rcu_is_watching+0x12/0xc0 [ 63.669031][ T6085] cfg80211_mlme_auth+0x564/0x980 [ 63.670618][ T6085] cfg80211_conn_do_work+0x64c/0xfd0 [ 63.672298][ T6085] ? __pfx_cfg80211_conn_do_work+0x10/0x10 [ 63.674473][ T6085] ? rcu_is_watching+0x12/0xc0 [ 63.675970][ T6085] ? trace_cfg80211_return_bss+0x17f/0x200 [ 63.677852][ T6085] ? __cfg80211_get_bss+0x610/0x940 [ 63.679525][ T6085] ? __asan_memcpy+0x3c/0x60 [ 63.680964][ T6085] cfg80211_connect+0x1365/0x2130 [ 63.682540][ T6085] ? __pfx_cfg80211_connect+0x10/0x10 [ 63.684441][ T6085] ? __asan_memset+0x23/0x50 [ 63.685868][ T6085] ? nl80211_crypto_settings+0xce1/0x1130 [ 63.687670][ T6085] nl80211_connect+0x1560/0x2140 [ 63.689210][ T6085] ? __pfx_nl80211_connect+0x10/0x10 [ 63.690961][ T6085] ? __pfx___mutex_trylock_common+0x10/0x10 [ 63.692829][ T6085] ? nl80211_pre_doit+0x1b0/0xb10 [ 63.694701][ T6085] genl_family_rcv_msg_doit+0x209/0x2f0 [ 63.696409][ T6085] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 63.698293][ T6085] ? bpf_lsm_capable+0x9/0x10 [ 63.699819][ T6085] ? security_capable+0x7e/0x260 [ 63.701407][ T6085] ? ns_capable+0xd7/0x110 [ 63.702869][ T6085] genl_rcv_msg+0x55c/0x800 [ 63.704583][ T6085] ? __pfx_genl_rcv_msg+0x10/0x10 [ 63.706213][ T6085] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 63.707943][ T6085] ? __pfx_nl80211_connect+0x10/0x10 [ 63.709640][ T6085] ? __pfx_nl80211_post_doit+0x10/0x10 [ 63.711393][ T6085] netlink_rcv_skb+0x158/0x420 [ 63.712925][ T6085] ? __pfx_genl_rcv_msg+0x10/0x10 [ 63.714823][ T6085] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 63.716646][ T6085] ? netlink_deliver_tap+0x1ae/0xd30 [ 63.718623][ T6085] genl_rcv+0x28/0x40 [ 63.719931][ T6085] netlink_unicast+0x5aa/0x870 [ 63.721475][ T6085] ? __pfx_netlink_unicast+0x10/0x10 [ 63.723196][ T6085] netlink_sendmsg+0x8c8/0xdd0 [ 63.725011][ T6085] ? __pfx_netlink_sendmsg+0x10/0x10 [ 63.726720][ T6085] ____sys_sendmsg+0xa98/0xc70 [ 63.728246][ T6085] ? copy_msghdr_from_user+0x10a/0x160 [ 63.730172][ T6085] ? __pfx_____sys_sendmsg+0x10/0x10 [ 63.731874][ T6085] ? preempt_schedule_thunk+0x16/0x30 [ 63.733866][ T6085] ? try_to_wake_up+0xa67/0x1870 [ 63.735477][ T6085] ___sys_sendmsg+0x134/0x1d0 [ 63.736971][ T6085] ? find_held_lock+0x2b/0x80 [ 63.738514][ T6085] ? __pfx____sys_sendmsg+0x10/0x10 [ 63.740164][ T6085] ? __lock_acquire+0x622/0x1c90 [ 63.741752][ T6085] __sys_sendmsg+0x16d/0x220 [ 63.743256][ T6085] ? __pfx___sys_sendmsg+0x10/0x10 [ 63.745131][ T6085] ? __x64_sys_futex+0x1e0/0x4c0 [ 63.746678][ T6085] do_syscall_64+0xcd/0xfa0 [ 63.748119][ T6085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.749997][ T6085] RIP: 0033:0x7f6cc578f7c9 [ 63.751454][ T6085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.757690][ T6085] RSP: 002b:00007f6cc669e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 63.760275][ T6085] RAX: ffffffffffffffda RBX: 00007f6cc59e5fa0 RCX: 00007f6cc578f7c9 [ 63.762762][ T6085] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 63.765316][ T6085] RBP: 00007f6cc5813f91 R08: 0000000000000000 R09: 0000000000000000 [ 63.767802][ T6085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 63.770316][ T6085] R13: 00007f6cc59e6038 R14: 00007f6cc59e5fa0 R15: 00007ffed3637698 [ 63.772806][ T6085] [ 63.773900][ T6085] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 63.776189][ T6085] CPU: 3 UID: 0 PID: 6085 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 63.779046][ T6085] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 63.782408][ T6085] Call Trace: [ 63.783488][ T6085] [ 63.784460][ T6085] dump_stack_lvl+0x3d/0x1f0 [ 63.785937][ T6085] vpanic+0x640/0x6f0 [ 63.787240][ T6085] ? ieee80211_determine_chan_mode+0x13a0/0x41b0 [ 63.789256][ T6085] panic+0xca/0xd0 [ 63.790489][ T6085] ? __pfx_panic+0x10/0x10 [ 63.791923][ T6085] ? check_panic_on_warn+0x1f/0xb0 [ 63.793547][ T6085] check_panic_on_warn+0xab/0xb0 [ 63.795162][ T6085] __warn+0xf6/0x3c0 [ 63.796411][ T6085] ? ieee80211_determine_chan_mode+0x13a0/0x41b0 [ 63.798411][ T6085] report_bug+0x3c3/0x580 [ 63.799800][ T6085] ? ieee80211_determine_chan_mode+0x13a0/0x41b0 [ 63.801789][ T6085] handle_bug+0x184/0x210 [ 63.803177][ T6085] exc_invalid_op+0x17/0x50 [ 63.804648][ T6085] asm_exc_invalid_op+0x1a/0x20 [ 63.806195][ T6085] RIP: 0010:ieee80211_determine_chan_mode+0x13a0/0x41b0 [ 63.808363][ T6085] Code: 4c 24 08 ba 01 00 00 00 8b 41 04 83 f8 00 0f 47 c2 89 41 04 e9 da f6 ff ff 4d 89 e7 4c 8b a4 24 a0 00 00 00 e8 61 00 ce f6 90 <0f> 0b 90 e9 da fc ff ff e8 53 00 ce f6 90 0f 0b 90 e9 45 fa ff ff [ 63.814590][ T6085] RSP: 0018:ffffc9000413e6d0 EFLAGS: 00010293 [ 63.816516][ T6085] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffffffff8aeee63e [ 63.819239][ T6085] RDX: ffff888029858000 RSI: ffffffff8aeee77f RDI: 0000000000000005 [ 63.822123][ T6085] RBP: ffffed1009b74af6 R08: 0000000000000005 R09: 0000000000000000 [ 63.824666][ T6085] R10: 0000000000000000 R11: ffff888025dc3000 R12: 1ffff92000827cf7 [ 63.827150][ T6085] R13: ffffc9000413ea08 R14: ffffc9000413ea10 R15: ffff888025dc3000 [ 63.829624][ T6085] ? ieee80211_determine_chan_mode+0x125e/0x41b0 [ 63.831650][ T6085] ? ieee80211_determine_chan_mode+0x139f/0x41b0 [ 63.833657][ T6085] ? __pfx_prb_read_valid+0x10/0x10 [ 63.835303][ T6085] ? __pfx_ieee80211_determine_chan_mode+0x10/0x10 [ 63.837334][ T6085] ? __lock_acquire+0x622/0x1c90 [ 63.838939][ T6085] ieee80211_prep_channel+0x218/0x18c0 [ 63.840660][ T6085] ? __pfx_ieee80211_prep_channel+0x10/0x10 [ 63.842541][ T6085] ? ieee80211_mgd_setup_link_sta+0x521/0xaa0 [ 63.844475][ T6085] ? find_held_lock+0x2b/0x80 [ 63.845931][ T6085] ? ieee80211_prep_connection+0x606/0x1930 [ 63.847831][ T6085] ieee80211_prep_connection+0x6df/0x1930 [ 63.849624][ T6085] ieee80211_mgd_auth+0xdd3/0x19d0 [ 63.851266][ T6085] ? __pfx_ieee80211_mgd_auth+0x10/0x10 [ 63.853001][ T6085] ? rcu_is_watching+0x12/0xc0 [ 63.854562][ T6085] cfg80211_mlme_auth+0x564/0x980 [ 63.856147][ T6085] cfg80211_conn_do_work+0x64c/0xfd0 [ 63.857813][ T6085] ? __pfx_cfg80211_conn_do_work+0x10/0x10 [ 63.859682][ T6085] ? rcu_is_watching+0x12/0xc0 [ 63.861196][ T6085] ? trace_cfg80211_return_bss+0x17f/0x200 [ 63.863047][ T6085] ? __cfg80211_get_bss+0x610/0x940 [ 63.864705][ T6085] ? __asan_memcpy+0x3c/0x60 [ 63.866172][ T6085] cfg80211_connect+0x1365/0x2130 [ 63.867772][ T6085] ? __pfx_cfg80211_connect+0x10/0x10 [ 63.869420][ T6085] ? __asan_memset+0x23/0x50 [ 63.870918][ T6085] ? nl80211_crypto_settings+0xce1/0x1130 [ 63.872707][ T6085] nl80211_connect+0x1560/0x2140 [ 63.874308][ T6085] ? __pfx_nl80211_connect+0x10/0x10 [ 63.876219][ T6085] ? __pfx___mutex_trylock_common+0x10/0x10 [ 63.878079][ T6085] ? nl80211_pre_doit+0x1b0/0xb10 [ 63.879676][ T6085] genl_family_rcv_msg_doit+0x209/0x2f0 [ 63.881410][ T6085] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 63.883332][ T6085] ? bpf_lsm_capable+0x9/0x10 [ 63.884856][ T6085] ? security_capable+0x7e/0x260 [ 63.886449][ T6085] ? ns_capable+0xd7/0x110 [ 63.887897][ T6085] genl_rcv_msg+0x55c/0x800 [ 63.889338][ T6085] ? __pfx_genl_rcv_msg+0x10/0x10 [ 63.891172][ T6085] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 63.893353][ T6085] ? __pfx_nl80211_connect+0x10/0x10 [ 63.895526][ T6085] ? __pfx_nl80211_post_doit+0x10/0x10 [ 63.897754][ T6085] netlink_rcv_skb+0x158/0x420 [ 63.899754][ T6085] ? __pfx_genl_rcv_msg+0x10/0x10 [ 63.901878][ T6085] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 63.904158][ T6085] ? netlink_deliver_tap+0x1ae/0xd30 [ 63.906382][ T6085] genl_rcv+0x28/0x40 [ 63.908033][ T6085] netlink_unicast+0x5aa/0x870 [ 63.910010][ T6085] ? __pfx_netlink_unicast+0x10/0x10 [ 63.912215][ T6085] netlink_sendmsg+0x8c8/0xdd0 [ 63.914263][ T6085] ? __pfx_netlink_sendmsg+0x10/0x10 [ 63.916470][ T6085] ____sys_sendmsg+0xa98/0xc70 [ 63.918429][ T6085] ? copy_msghdr_from_user+0x10a/0x160 [ 63.920737][ T6085] ? __pfx_____sys_sendmsg+0x10/0x10 [ 63.922871][ T6085] ? preempt_schedule_thunk+0x16/0x30 [ 63.925013][ T6085] ? try_to_wake_up+0xa67/0x1870 [ 63.927018][ T6085] ___sys_sendmsg+0x134/0x1d0 [ 63.928912][ T6085] ? find_held_lock+0x2b/0x80 [ 63.930744][ T6085] ? __pfx____sys_sendmsg+0x10/0x10 [ 63.932734][ T6085] ? __lock_acquire+0x622/0x1c90 [ 63.934747][ T6085] __sys_sendmsg+0x16d/0x220 [ 63.936721][ T6085] ? __pfx___sys_sendmsg+0x10/0x10 [ 63.938873][ T6085] ? __x64_sys_futex+0x1e0/0x4c0 [ 63.940953][ T6085] do_syscall_64+0xcd/0xfa0 [ 63.942907][ T6085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.945357][ T6085] RIP: 0033:0x7f6cc578f7c9 [ 63.947064][ T6085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.953806][ T6085] RSP: 002b:00007f6cc669e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 63.956413][ T6085] RAX: ffffffffffffffda RBX: 00007f6cc59e5fa0 RCX: 00007f6cc578f7c9 [ 63.958941][ T6085] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 63.961810][ T6085] RBP: 00007f6cc5813f91 R08: 0000000000000000 R09: 0000000000000000 [ 63.964381][ T6085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 63.966844][ T6085] R13: 00007f6cc59e6038 R14: 00007f6cc59e5fa0 R15: 00007ffed3637698 [ 63.969334][ T6085] [ 63.971076][ T6085] Kernel Offset: disabled [ 63.972667][ T6085] Rebooting in 86400 seconds..