Warning: Permanently added '[localhost]:1774' (ED25519) to the list of known hosts. [ 60.063477][ T40] audit: type=1400 audit(1769193626.304:62): avc: denied { execute } for pid=5937 comm="sh" name="syz-execprog" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 60.072707][ T40] audit: type=1400 audit(1769193626.304:63): avc: denied { execute_no_trans } for pid=5937 comm="sh" path="/syz-execprog" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 2026/01/23 18:40:27 parsed 1 programs [ 61.486048][ T40] audit: type=1400 audit(1769193627.724:64): avc: denied { node_bind } for pid=5937 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 64.088736][ T40] audit: type=1400 audit(1769193630.334:65): avc: denied { mounton } for pid=5947 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 64.097290][ T40] audit: type=1400 audit(1769193630.334:66): avc: denied { mount } for pid=5947 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 64.100242][ T5947] cgroup: Unknown subsys name 'net' [ 64.109320][ T40] audit: type=1400 audit(1769193630.354:67): avc: denied { unmount } for pid=5947 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 64.281783][ T5947] cgroup: Unknown subsys name 'cpuset' [ 64.288324][ T5947] cgroup: Unknown subsys name 'rlimit' [ 64.445860][ T40] audit: type=1400 audit(1769193630.684:68): avc: denied { setattr } for pid=5947 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 64.458109][ T40] audit: type=1400 audit(1769193630.684:69): avc: denied { create } for pid=5947 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 64.464849][ T40] audit: type=1400 audit(1769193630.684:70): avc: denied { write } for pid=5947 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 64.472127][ T40] audit: type=1400 audit(1769193630.684:71): avc: denied { read } for pid=5947 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 64.501453][ T5949] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 65.253926][ T5947] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 67.129134][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 67.129161][ T40] audit: type=1400 audit(1769193633.374:82): avc: denied { execmem } for pid=5954 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 67.138194][ T40] audit: type=1400 audit(1769193633.374:83): avc: denied { read } for pid=5955 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 67.144833][ T40] audit: type=1400 audit(1769193633.374:84): avc: denied { open } for pid=5955 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 67.158375][ T40] audit: type=1400 audit(1769193633.374:85): avc: denied { mounton } for pid=5955 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 67.188360][ T40] audit: type=1400 audit(1769193633.434:86): avc: denied { mount } for pid=5955 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 67.197299][ T40] audit: type=1400 audit(1769193633.434:87): avc: denied { mounton } for pid=5955 comm="syz-executor" path="/syzkaller.S9ziSg/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 67.205969][ T40] audit: type=1400 audit(1769193633.434:88): avc: denied { mount } for pid=5955 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 67.213273][ T40] audit: type=1400 audit(1769193633.434:89): avc: denied { mounton } for pid=5955 comm="syz-executor" path="/syzkaller.S9ziSg/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 67.222608][ T40] audit: type=1400 audit(1769193633.434:90): avc: denied { mounton } for pid=5955 comm="syz-executor" path="/syzkaller.S9ziSg/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 67.231998][ T40] audit: type=1400 audit(1769193633.434:91): avc: denied { unmount } for pid=5955 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 67.243029][ T5955] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 67.506737][ T1153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.509267][ T1153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.528854][ T1153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.531357][ T1153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.050787][ T6014] chnl_net:caif_netlink_parms(): no params data found [ 69.129203][ T6014] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.132747][ T6014] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.135786][ T6014] bridge_slave_0: entered allmulticast mode [ 69.139789][ T6014] bridge_slave_0: entered promiscuous mode [ 69.145518][ T6014] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.148948][ T6014] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.151897][ T6014] bridge_slave_1: entered allmulticast mode [ 69.155040][ T6014] bridge_slave_1: entered promiscuous mode [ 69.182768][ T6014] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.189309][ T6014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.203994][ T6014] team0: Port device team_slave_0 added [ 69.207210][ T6014] team0: Port device team_slave_1 added [ 69.222532][ T6014] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.224684][ T6014] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.232725][ T6014] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.237509][ T6014] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.239910][ T6014] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.247841][ T6014] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.270025][ T6014] hsr_slave_0: entered promiscuous mode [ 69.272303][ T6014] hsr_slave_1: entered promiscuous mode [ 69.384258][ T6014] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.393792][ T6014] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.399021][ T6014] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.403840][ T6014] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.427504][ T6014] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.430838][ T6014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.434782][ T6014] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.437948][ T6014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.472173][ T6014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.482442][ T1150] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.486718][ T1150] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.498191][ T6014] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.507686][ T1153] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.510373][ T1153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.519482][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.522276][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.642334][ T6014] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.678033][ T6014] veth0_vlan: entered promiscuous mode [ 69.684996][ T6014] veth1_vlan: entered promiscuous mode [ 69.700956][ T6014] veth0_macvtap: entered promiscuous mode [ 69.705211][ T6014] veth1_macvtap: entered promiscuous mode [ 69.713656][ T6014] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.720547][ T6014] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.727348][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.732239][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.736224][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.739861][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.822631][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.829965][ T5297] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.833825][ T5297] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.837791][ T5297] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.843032][ T5297] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.846754][ T5297] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.911274][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.990308][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.079034][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/01/23 18:40:36 executed programs: 0 [ 70.464269][ T5297] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.467348][ T5297] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.470861][ T5297] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.473858][ T5297] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.476662][ T5297] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.606837][ T6052] chnl_net:caif_netlink_parms(): no params data found [ 70.668984][ T6052] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.671551][ T6052] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.674103][ T6052] bridge_slave_0: entered allmulticast mode [ 70.677224][ T6052] bridge_slave_0: entered promiscuous mode [ 70.681404][ T6052] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.683886][ T6052] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.686373][ T6052] bridge_slave_1: entered allmulticast mode [ 70.689415][ T6052] bridge_slave_1: entered promiscuous mode [ 70.704957][ T6052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.710444][ T6052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.727773][ T6052] team0: Port device team_slave_0 added [ 70.732106][ T6052] team0: Port device team_slave_1 added [ 70.749426][ T6052] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.751755][ T6052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.760909][ T6052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.765806][ T6052] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.768246][ T6052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.776405][ T6052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.802006][ T6052] hsr_slave_0: entered promiscuous mode [ 70.804450][ T6052] hsr_slave_1: entered promiscuous mode [ 70.806682][ T6052] debugfs: 'hsr0' already exists in 'hsr' [ 70.808841][ T6052] Cannot create hsr debugfs directory [ 72.548922][ T65] Bluetooth: hci0: command tx timeout [ 73.007085][ T12] bridge_slave_1: left allmulticast mode [ 73.014098][ T12] bridge_slave_1: left promiscuous mode [ 73.017368][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.023864][ T12] bridge_slave_0: left allmulticast mode [ 73.026418][ T12] bridge_slave_0: left promiscuous mode [ 73.030718][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.298320][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 73.303029][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 73.306797][ T12] bond0 (unregistering): Released all slaves [ 73.373210][ T40] kauditd_printk_skb: 20 callbacks suppressed [ 73.373225][ T40] audit: type=1400 audit(1769193639.614:112): avc: denied { create } for pid=6065 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 73.383974][ T40] audit: type=1400 audit(1769193639.624:113): avc: denied { write } for pid=6065 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth2.link" dev="tmpfs" ino=2094 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 73.393412][ T40] audit: type=1400 audit(1769193639.624:114): avc: denied { append } for pid=6065 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" dev="tmpfs" ino=2094 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 73.425192][ T40] audit: type=1400 audit(1769193639.664:115): avc: denied { unlink } for pid=6068 comm="rm" name="resolv.conf.eth2.link" dev="tmpfs" ino=2094 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 73.437955][ T12] hsr_slave_0: left promiscuous mode [ 73.440463][ T12] hsr_slave_1: left promiscuous mode [ 73.442600][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.445689][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.450590][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.453662][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.463061][ T12] veth1_macvtap: left promiscuous mode [ 73.465625][ T12] veth0_macvtap: left promiscuous mode [ 73.468228][ T12] veth1_vlan: left promiscuous mode [ 73.470109][ T12] veth0_vlan: left promiscuous mode [ 73.756885][ T12] team0 (unregistering): Port device team_slave_1 removed [ 73.776423][ T12] team0 (unregistering): Port device team_slave_0 removed [ 74.442199][ T6052] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.448913][ T6052] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.453076][ T6052] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.457378][ T6052] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.509010][ T6052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.521057][ T6052] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.527050][ T1153] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.530106][ T1153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.539863][ T1153] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.542662][ T1153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.574936][ T6052] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.630495][ T65] Bluetooth: hci0: command tx timeout [ 74.769947][ T6052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.796092][ T6052] veth0_vlan: entered promiscuous mode [ 74.802439][ T6052] veth1_vlan: entered promiscuous mode [ 74.830070][ T6052] veth0_macvtap: entered promiscuous mode [ 74.835314][ T6052] veth1_macvtap: entered promiscuous mode [ 74.847088][ T6052] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.857057][ T6052] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.865658][ T89] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.874927][ T89] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.881354][ T89] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.885269][ T89] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.922466][ T89] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.925562][ T89] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.942119][ T89] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.945469][ T89] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.984384][ T40] audit: type=1400 audit(1769193641.224:116): avc: denied { ioctl } for pid=6099 comm="syz.0.17" path="socket:[8622]" dev="sockfs" ino=8622 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 75.012481][ T6099] ------------[ cut here ]------------ [ 75.014491][ T6099] !chanctx_conf [ 75.014499][ T6099] WARNING: net/mac80211/rate.c:53 at rate_control_rate_init+0x5c5/0x730, CPU#2: syz.0.17/6099 [ 75.019566][ T6099] Modules linked in: [ 75.020933][ T6099] CPU: 2 UID: 0 PID: 6099 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 75.024456][ T6099] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 75.027856][ T6099] RIP: 0010:rate_control_rate_init+0x5c5/0x730 [ 75.030616][ T6099] Code: 48 8d 35 00 00 00 00 e8 79 b7 f4 f6 e8 74 31 fe f6 e9 20 fe ff ff e8 fa 8e 18 f7 90 0f 0b 90 e9 12 fe ff ff e8 ec 8e 18 f7 90 <0f> 0b 90 eb b1 e8 e1 8e 18 f7 e8 3c 38 fd f6 31 ff 89 c3 89 c6 e8 [ 75.036678][ T6099] RSP: 0018:ffffc90003a7f210 EFLAGS: 00010293 [ 75.039351][ T6099] RAX: 0000000000000000 RBX: ffff88802c188000 RCX: ffffffff8aee6f4e [ 75.042472][ T6099] RDX: ffff8880331f4980 RSI: ffffffff8aee7114 RDI: ffff8880331f4980 [ 75.045104][ T6099] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 75.048439][ T6099] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888033f7cbe0 [ 75.051507][ T6099] R13: ffff88803b3d0e80 R14: ffff88802ca34000 R15: 0000000000000000 [ 75.054406][ T6099] FS: 0000555567d39500(0000) GS:ffff8880d67dc000(0000) knlGS:0000000000000000 [ 75.058389][ T6099] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.061248][ T6099] CR2: 0000200000001080 CR3: 000000002658b000 CR4: 0000000000352ef0 [ 75.064436][ T6099] Call Trace: [ 75.066070][ T6099] [ 75.067390][ T6099] rate_control_rate_init_all_links+0x76/0x1f0 [ 75.070322][ T6099] sta_apply_auth_flags.isra.0+0x4aa/0x500 [ 75.072755][ T6099] sta_apply_parameters+0xcb3/0x1950 [ 75.074912][ T6099] ieee80211_add_station+0x3fe/0x6d0 [ 75.077056][ T6099] nl80211_new_station+0x1357/0x1c30 [ 75.079494][ T6099] ? __pfx_nl80211_new_station+0x10/0x10 [ 75.081750][ T6099] ? nl80211_pre_doit+0x19a/0xae0 [ 75.083748][ T6099] genl_family_rcv_msg_doit+0x214/0x300 [ 75.085993][ T6099] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 75.088642][ T6099] ? bpf_lsm_capable+0x9/0x10 [ 75.090566][ T6099] ? security_capable+0x80/0x260 [ 75.092507][ T6099] ? ns_capable+0xd2/0xf0 [ 75.093951][ T6099] genl_rcv_msg+0x560/0x800 [ 75.095427][ T6099] ? __pfx_genl_rcv_msg+0x10/0x10 [ 75.097058][ T6099] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 75.098980][ T6099] ? __pfx_nl80211_new_station+0x10/0x10 [ 75.100761][ T6099] ? __pfx_nl80211_post_doit+0x10/0x10 [ 75.102535][ T6099] netlink_rcv_skb+0x159/0x420 [ 75.104091][ T6099] ? __pfx_genl_rcv_msg+0x10/0x10 [ 75.105729][ T6099] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 75.107427][ T6099] ? netlink_deliver_tap+0x1ae/0xcc0 [ 75.109367][ T6099] genl_rcv+0x28/0x40 [ 75.110672][ T6099] netlink_unicast+0x5aa/0x870 [ 75.112231][ T6099] ? __pfx_netlink_unicast+0x10/0x10 [ 75.113960][ T6099] netlink_sendmsg+0x8b0/0xda0 [ 75.115511][ T6099] ? __pfx_netlink_sendmsg+0x10/0x10 [ 75.117227][ T6099] ? __might_fault+0x30/0x140 [ 75.118934][ T6099] ____sys_sendmsg+0xa54/0xc30 [ 75.120496][ T6099] ? __pfx_____sys_sendmsg+0x10/0x10 [ 75.122230][ T6099] ___sys_sendmsg+0x190/0x1e0 [ 75.123731][ T6099] ? __pfx____sys_sendmsg+0x10/0x10 [ 75.125387][ T6099] ? do_futex+0x192/0x350 [ 75.126801][ T6099] ? __pfx_do_futex+0x10/0x10 [ 75.128650][ T6099] __sys_sendmsg+0x170/0x220 [ 75.130506][ T6099] ? __pfx___sys_sendmsg+0x10/0x10 [ 75.132317][ T6099] ? __x64_sys_futex+0x34f/0x4d0 [ 75.134015][ T6099] do_syscall_64+0xc9/0xf80 [ 75.135534][ T6099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.137521][ T6099] RIP: 0033:0x7fa6cd99acb9 [ 75.139144][ T6099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.145420][ T6099] RSP: 002b:00007ffddc8920a8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 75.148905][ T6099] RAX: ffffffffffffffda RBX: 00007fa6cdc15fa0 RCX: 00007fa6cd99acb9 [ 75.152250][ T6099] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000006 [ 75.155592][ T6099] RBP: 00007fa6cda08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 75.159082][ T6099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.162424][ T6099] R13: 00007fa6cdc15fac R14: 00007fa6cdc15fa0 R15: 00007fa6cdc15fa0 [ 75.165050][ T6099] [ 75.166070][ T6099] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 75.168584][ T6099] CPU: 2 UID: 0 PID: 6099 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 75.172087][ T6099] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 75.176304][ T6099] Call Trace: [ 75.177774][ T6099] [ 75.179032][ T6099] dump_stack_lvl+0x100/0x190 [ 75.180717][ T6099] vpanic+0x20d/0x630 [ 75.182121][ T6099] panic+0xd1/0xd1 [ 75.183588][ T6099] ? __pfx_panic+0x10/0x10 [ 75.185087][ T6099] ? check_panic_on_warn+0x1f/0x90 [ 75.186937][ T6099] check_panic_on_warn.cold+0x19/0x34 [ 75.189201][ T6099] ? rate_control_rate_init+0x5c5/0x730 [ 75.191487][ T6099] __warn.cold+0x191/0x2f8 [ 75.193333][ T6099] __report_bug+0x296/0x3d0 [ 75.195101][ T6099] ? rate_control_rate_init+0x5c5/0x730 [ 75.197407][ T6099] ? __pfx___report_bug+0x10/0x10 [ 75.199366][ T6099] ? netlink_rcv_skb+0x159/0x420 [ 75.201277][ T6099] ? genl_rcv+0x28/0x40 [ 75.202873][ T6099] ? netlink_unicast+0x5aa/0x870 [ 75.204803][ T6099] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 75.207203][ T6099] ? __sys_sendmsg+0x170/0x220 [ 75.209095][ T6099] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.211558][ T6099] ? rate_control_rate_init+0x5c5/0x730 [ 75.213540][ T6099] report_bug+0xb2/0x220 [ 75.214913][ T6099] ? rate_control_rate_init+0x5c5/0x730 [ 75.216594][ T6099] handle_bug+0x166/0x2a0 [ 75.218030][ T6099] exc_invalid_op+0x17/0x50 [ 75.219445][ T6099] asm_exc_invalid_op+0x1a/0x20 [ 75.220952][ T6099] RIP: 0010:rate_control_rate_init+0x5c5/0x730 [ 75.222983][ T6099] Code: 48 8d 35 00 00 00 00 e8 79 b7 f4 f6 e8 74 31 fe f6 e9 20 fe ff ff e8 fa 8e 18 f7 90 0f 0b 90 e9 12 fe ff ff e8 ec 8e 18 f7 90 <0f> 0b 90 eb b1 e8 e1 8e 18 f7 e8 3c 38 fd f6 31 ff 89 c3 89 c6 e8 [ 75.229499][ T6099] RSP: 0018:ffffc90003a7f210 EFLAGS: 00010293 [ 75.232006][ T6099] RAX: 0000000000000000 RBX: ffff88802c188000 RCX: ffffffff8aee6f4e [ 75.235310][ T6099] RDX: ffff8880331f4980 RSI: ffffffff8aee7114 RDI: ffff8880331f4980 [ 75.238692][ T6099] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 75.242079][ T6099] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888033f7cbe0 [ 75.245407][ T6099] R13: ffff88803b3d0e80 R14: ffff88802ca34000 R15: 0000000000000000 [ 75.248486][ T6099] ? rate_control_rate_init+0x3fe/0x730 [ 75.250325][ T6099] ? rate_control_rate_init+0x5c4/0x730 [ 75.252269][ T6099] rate_control_rate_init_all_links+0x76/0x1f0 [ 75.254606][ T6099] sta_apply_auth_flags.isra.0+0x4aa/0x500 [ 75.256939][ T6099] sta_apply_parameters+0xcb3/0x1950 [ 75.259097][ T6099] ieee80211_add_station+0x3fe/0x6d0 [ 75.261208][ T6099] nl80211_new_station+0x1357/0x1c30 [ 75.263314][ T6099] ? __pfx_nl80211_new_station+0x10/0x10 [ 75.265558][ T6099] ? nl80211_pre_doit+0x19a/0xae0 [ 75.267562][ T6099] genl_family_rcv_msg_doit+0x214/0x300 [ 75.269818][ T6099] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 75.272233][ T6099] ? bpf_lsm_capable+0x9/0x10 [ 75.274151][ T6099] ? security_capable+0x80/0x260 [ 75.276160][ T6099] ? ns_capable+0xd2/0xf0 [ 75.277847][ T6099] genl_rcv_msg+0x560/0x800 [ 75.279332][ T6099] ? __pfx_genl_rcv_msg+0x10/0x10 [ 75.280949][ T6099] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 75.282708][ T6099] ? __pfx_nl80211_new_station+0x10/0x10 [ 75.284514][ T6099] ? __pfx_nl80211_post_doit+0x10/0x10 [ 75.286353][ T6099] netlink_rcv_skb+0x159/0x420 [ 75.287937][ T6099] ? __pfx_genl_rcv_msg+0x10/0x10 [ 75.289617][ T6099] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 75.291325][ T6099] ? netlink_deliver_tap+0x1ae/0xcc0 [ 75.293181][ T6099] genl_rcv+0x28/0x40 [ 75.294483][ T6099] netlink_unicast+0x5aa/0x870 [ 75.296029][ T6099] ? __pfx_netlink_unicast+0x10/0x10 [ 75.297754][ T6099] netlink_sendmsg+0x8b0/0xda0 [ 75.299334][ T6099] ? __pfx_netlink_sendmsg+0x10/0x10 [ 75.301060][ T6099] ? __might_fault+0x30/0x140 [ 75.302573][ T6099] ____sys_sendmsg+0xa54/0xc30 [ 75.304139][ T6099] ? __pfx_____sys_sendmsg+0x10/0x10 [ 75.305855][ T6099] ___sys_sendmsg+0x190/0x1e0 [ 75.307391][ T6099] ? __pfx____sys_sendmsg+0x10/0x10 [ 75.309105][ T6099] ? do_futex+0x192/0x350 [ 75.310502][ T6099] ? __pfx_do_futex+0x10/0x10 [ 75.312011][ T6099] __sys_sendmsg+0x170/0x220 [ 75.313572][ T6099] ? __pfx___sys_sendmsg+0x10/0x10 [ 75.315219][ T6099] ? __x64_sys_futex+0x34f/0x4d0 [ 75.316835][ T6099] do_syscall_64+0xc9/0xf80 [ 75.318320][ T6099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.320217][ T6099] RIP: 0033:0x7fa6cd99acb9 [ 75.321670][ T6099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.327836][ T6099] RSP: 002b:00007ffddc8920a8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 75.331163][ T6099] RAX: ffffffffffffffda RBX: 00007fa6cdc15fa0 RCX: 00007fa6cd99acb9 [ 75.334369][ T6099] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000006 [ 75.337525][ T6099] RBP: 00007fa6cda08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 75.340669][ T6099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.343837][ T6099] R13: 00007fa6cdc15fac R14: 00007fa6cdc15fa0 R15: 00007fa6cdc15fa0 [ 75.347023][ T6099] [ 75.348919][ T6099] Kernel Offset: disabled [ 75.350655][ T6099] Rebooting in 86400 seconds..