[ 44.050200][ T40] audit: type=1400 audit(1769818087.146:59): avc: denied { write } for pid=5832 comm="sh" path="pipe:[7289]" dev="pipefs" ino=7289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 44.058611][ T40] audit: type=1400 audit(1769818087.146:60): avc: denied { rlimitinh } for pid=5832 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 44.065990][ T40] audit: type=1400 audit(1769818087.146:61): avc: denied { siginh } for pid=5832 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:39230' (ED25519) to the list of known hosts. [ 50.233347][ T40] audit: type=1400 audit(1769818093.336:62): avc: denied { execute } for pid=5923 comm="sh" name="syz-execprog" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 50.240803][ T40] audit: type=1400 audit(1769818093.356:63): avc: denied { execute_no_trans } for pid=5923 comm="sh" path="/syz-execprog" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 2026/01/31 00:08:14 parsed 1 programs [ 51.458849][ T40] audit: type=1400 audit(1769818094.566:64): avc: denied { node_bind } for pid=5923 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 53.422710][ T40] audit: type=1400 audit(1769818096.526:65): avc: denied { mounton } for pid=5934 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 53.431187][ T40] audit: type=1400 audit(1769818096.536:66): avc: denied { mount } for pid=5934 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 53.432993][ T5934] cgroup: Unknown subsys name 'net' [ 53.443822][ T40] audit: type=1400 audit(1769818096.546:67): avc: denied { unmount } for pid=5934 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 53.557443][ T5934] cgroup: Unknown subsys name 'cpuset' [ 53.561349][ T5934] cgroup: Unknown subsys name 'rlimit' [ 53.731507][ T40] audit: type=1400 audit(1769818096.836:68): avc: denied { setattr } for pid=5934 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 53.741016][ T40] audit: type=1400 audit(1769818096.836:69): avc: denied { create } for pid=5934 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 53.750082][ T40] audit: type=1400 audit(1769818096.836:70): avc: denied { write } for pid=5934 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 53.764880][ T40] audit: type=1400 audit(1769818096.836:71): avc: denied { read } for pid=5934 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 53.795968][ T5939] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 54.577640][ T5934] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 56.379152][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 56.379164][ T40] audit: type=1400 audit(1769818099.486:82): avc: denied { execmem } for pid=5943 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 56.390375][ T40] audit: type=1400 audit(1769818099.486:83): avc: denied { mounton } for pid=5943 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 56.398185][ T40] audit: type=1400 audit(1769818099.486:84): avc: denied { mount } for pid=5943 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 56.405243][ T40] audit: type=1400 audit(1769818099.486:85): avc: denied { read } for pid=5943 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 56.411832][ T40] audit: type=1400 audit(1769818099.486:86): avc: denied { open } for pid=5943 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 56.419318][ T40] audit: type=1400 audit(1769818099.486:87): avc: denied { mounton } for pid=5943 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 56.426279][ T40] audit: type=1400 audit(1769818099.526:88): avc: denied { mounton } for pid=5943 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=2836 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 56.433717][ T40] audit: type=1400 audit(1769818099.526:89): avc: denied { mount } for pid=5943 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 56.440831][ T40] audit: type=1401 audit(1769818099.526:90): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 56.508505][ T40] audit: type=1400 audit(1769818099.616:91): avc: denied { mount } for pid=5946 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 56.527546][ T5946] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 56.839371][ T5963] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 56.843102][ T5963] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 56.847514][ T5963] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 56.850879][ T5963] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 56.853574][ T5963] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 57.492234][ T1189] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.495656][ T1189] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.512945][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.515789][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.224147][ T6003] chnl_net:caif_netlink_parms(): no params data found [ 58.324905][ T6003] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.328842][ T6003] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.331948][ T6003] bridge_slave_0: entered allmulticast mode [ 58.336040][ T6003] bridge_slave_0: entered promiscuous mode [ 58.358893][ T6003] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.361974][ T6003] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.365929][ T6003] bridge_slave_1: entered allmulticast mode [ 58.369844][ T6003] bridge_slave_1: entered promiscuous mode [ 58.399388][ T6003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.406578][ T6003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.447541][ T6003] team0: Port device team_slave_0 added [ 58.452324][ T6003] team0: Port device team_slave_1 added [ 58.475528][ T6003] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.478534][ T6003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.486930][ T6003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.497944][ T6003] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.500904][ T6003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.511824][ T6003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.545367][ T6003] hsr_slave_0: entered promiscuous mode [ 58.547660][ T6003] hsr_slave_1: entered promiscuous mode [ 58.673737][ T6003] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 58.679926][ T6003] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 58.684036][ T6003] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 58.688590][ T6003] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 58.766633][ T6003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.781240][ T6003] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.789614][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.792802][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.809859][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.812947][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.951580][ T6003] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.972818][ T6003] veth0_vlan: entered promiscuous mode [ 58.978972][ T6003] veth1_vlan: entered promiscuous mode [ 58.992713][ T6003] veth0_macvtap: entered promiscuous mode [ 58.996509][ T6003] veth1_macvtap: entered promiscuous mode [ 59.004427][ T6003] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.013760][ T6003] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.022826][ T1145] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.025921][ T1145] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.029826][ T1145] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.032628][ T1145] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.106684][ T1189] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.176155][ T1189] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.256528][ T1189] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.325355][ T1189] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/01/31 00:08:22 executed programs: 0 [ 59.851313][ T5292] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 59.854401][ T5292] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 59.858511][ T5292] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 59.862237][ T5292] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 59.865836][ T5292] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 59.983123][ T6038] chnl_net:caif_netlink_parms(): no params data found [ 60.022780][ T6038] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.025267][ T6038] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.027576][ T6038] bridge_slave_0: entered allmulticast mode [ 60.030209][ T6038] bridge_slave_0: entered promiscuous mode [ 60.033813][ T6038] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.036674][ T6038] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.038990][ T6038] bridge_slave_1: entered allmulticast mode [ 60.041663][ T6038] bridge_slave_1: entered promiscuous mode [ 60.055661][ T6038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.059889][ T6038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.074068][ T6038] team0: Port device team_slave_0 added [ 60.077138][ T6038] team0: Port device team_slave_1 added [ 60.090557][ T6038] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.092772][ T6038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.100910][ T6038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.106236][ T6038] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.108441][ T6038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.116464][ T6038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.139620][ T6038] hsr_slave_0: entered promiscuous mode [ 60.141836][ T6038] hsr_slave_1: entered promiscuous mode [ 60.143860][ T6038] debugfs: 'hsr0' already exists in 'hsr' [ 60.146133][ T6038] Cannot create hsr debugfs directory [ 61.925269][ T5292] Bluetooth: hci0: command tx timeout [ 62.328695][ T1189] bridge_slave_1: left allmulticast mode [ 62.331142][ T1189] bridge_slave_1: left promiscuous mode [ 62.334141][ T1189] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.341423][ T1189] bridge_slave_0: left allmulticast mode [ 62.343696][ T1189] bridge_slave_0: left promiscuous mode [ 62.347397][ T1189] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.587405][ T1189] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 62.593537][ T1189] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 62.598888][ T1189] bond0 (unregistering): Released all slaves [ 62.689087][ T40] kauditd_printk_skb: 20 callbacks suppressed [ 62.689104][ T40] audit: type=1400 audit(1769818105.796:112): avc: denied { create } for pid=6047 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 62.700779][ T40] audit: type=1400 audit(1769818105.796:113): avc: denied { write } for pid=6047 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth2.link" dev="tmpfs" ino=2096 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 62.711566][ T40] audit: type=1400 audit(1769818105.796:114): avc: denied { append } for pid=6047 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" dev="tmpfs" ino=2096 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 62.726157][ T40] audit: type=1400 audit(1769818105.836:115): avc: denied { unlink } for pid=6050 comm="rm" name="resolv.conf.eth2.link" dev="tmpfs" ino=2096 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 62.751271][ T1189] hsr_slave_0: left promiscuous mode [ 62.753352][ T1189] hsr_slave_1: left promiscuous mode [ 62.755677][ T1189] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.758460][ T1189] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.761362][ T1189] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.763673][ T1189] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.776744][ T1189] veth1_macvtap: left promiscuous mode [ 62.778605][ T1189] veth0_macvtap: left promiscuous mode [ 62.780387][ T1189] veth1_vlan: left promiscuous mode [ 62.782067][ T1189] veth0_vlan: left promiscuous mode [ 63.037279][ T1189] team0 (unregistering): Port device team_slave_1 removed [ 63.061105][ T1189] team0 (unregistering): Port device team_slave_0 removed [ 63.581560][ T6038] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.588041][ T6038] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.592845][ T6038] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.605647][ T6038] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.666584][ T6038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.676838][ T6038] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.683409][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.686345][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.696641][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.699213][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.799921][ T6038] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.819082][ T6038] veth0_vlan: entered promiscuous mode [ 63.824017][ T6038] veth1_vlan: entered promiscuous mode [ 63.839021][ T6038] veth0_macvtap: entered promiscuous mode [ 63.842864][ T6038] veth1_macvtap: entered promiscuous mode [ 63.938042][ T6038] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.946755][ T6038] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.956423][ T1145] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.959645][ T1145] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.962958][ T1145] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.965936][ T1145] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.007609][ T5292] Bluetooth: hci0: command tx timeout [ 64.019630][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.022072][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.037532][ T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.040316][ T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.069850][ T40] audit: type=1400 audit(1769818107.176:116): avc: denied { ioctl } for pid=6077 comm="syz.0.17" path="socket:[7862]" dev="sockfs" ino=7862 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 64.115078][ T1145] ------------[ cut here ]------------ [ 64.117490][ T1145] no supported rates for sta 08:02:11:00:00:00 (0xf, band 0) in rate_mask 0xffffffff with flags 0x10 [ 64.121914][ T1145] WARNING: net/mac80211/rate.c:401 at __rate_control_send_low+0x610/0x760, CPU#0: kworker/u32:5/1145 [ 64.126397][ T1145] Modules linked in: [ 64.128128][ T1145] CPU: 0 UID: 0 PID: 1145 Comm: kworker/u32:5 Not tainted syzkaller #0 PREEMPT(full) [ 64.131984][ T1145] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 64.136201][ T1145] Workqueue: events_unbound cfg80211_wiphy_work [ 64.138814][ T1145] RIP: 0010:__rate_control_send_low+0x621/0x760 [ 64.141470][ T1145] Code: f7 48 8b 44 24 10 8b ac a8 d4 00 00 00 e8 77 bb 18 f7 48 8d 3d f0 89 d9 05 44 8b 44 24 04 48 8b 74 24 10 45 89 f1 89 d9 89 ea <67> 48 0f b9 3a e9 2f fd ff ff 48 8b 7c 24 08 e8 9b 0c 83 f7 e9 03 [ 64.149401][ T1145] RSP: 0018:ffffc90006617430 EFLAGS: 00010293 [ 64.151934][ T1145] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 64.155296][ T1145] RDX: 000000000000000f RSI: ffff8880268a4ec0 RDI: ffffffff90c7c9e0 [ 64.158579][ T1145] RBP: 000000000000000f R08: 00000000ffffffff R09: 0000000000000010 [ 64.161713][ T1145] R10: 000000000000000c R11: 0000000000000000 R12: ffff88802bc063e8 [ 64.165024][ T1145] R13: ffff888034493128 R14: 0000000000000010 R15: dffffc0000000000 [ 64.168299][ T1145] FS: 0000000000000000(0000) GS:ffff8880d65d9000(0000) knlGS:0000000000000000 [ 64.172014][ T1145] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 64.174823][ T1145] CR2: 000000c003c059d0 CR3: 00000000261bc000 CR4: 0000000000352ef0 [ 64.177418][ T1145] Call Trace: [ 64.178552][ T1145] [ 64.179487][ T1145] rate_control_send_low+0x124/0x7e0 [ 64.181103][ T1145] rate_control_get_rate+0x1be/0x5c0 [ 64.182715][ T1145] ieee80211_tx_h_rate_ctrl+0x778/0x1a20 [ 64.184454][ T1145] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 64.186420][ T1145] ? sta_info_hash_lookup+0x259/0x660 [ 64.188198][ T1145] invoke_tx_handlers_late+0xfb4/0x2750 [ 64.190684][ T1145] ? ieee80211_queue_skb+0x3ae/0x1f60 [ 64.192754][ T1145] ? invoke_tx_handlers_late+0x12f0/0x2750 [ 64.194605][ T1145] ? invoke_tx_handlers_early+0x65d/0x27d0 [ 64.196439][ T1145] ieee80211_tx+0x304/0x460 [ 64.197920][ T1145] ? __pfx_ieee80211_tx+0x10/0x10 [ 64.200084][ T1145] ? ieee80211_skb_resize+0x119/0x670 [ 64.201865][ T1145] ? ieee80211_set_qos_hdr+0x2c1/0x3f0 [ 64.203538][ T1145] ieee80211_xmit+0x30f/0x3e0 [ 64.205094][ T1145] __ieee80211_tx_skb_tid_band+0x2c2/0x720 [ 64.206888][ T1145] ieee80211_scan_state_send_probe+0x33d/0xac0 [ 64.209219][ T1145] ieee80211_scan_work+0x750/0x1ff0 [ 64.210903][ T1145] ? do_raw_spin_lock+0x128/0x260 [ 64.212451][ T1145] ? __pfx_ieee80211_scan_work+0x10/0x10 [ 64.214197][ T1145] cfg80211_wiphy_work+0x3f7/0x560 [ 64.215835][ T1145] process_one_work+0x9c2/0x1840 [ 64.217342][ T1145] ? __pfx_process_one_work+0x10/0x10 [ 64.219065][ T1145] ? assign_work+0x19c/0x250 [ 64.220480][ T1145] worker_thread+0x5da/0xe40 [ 64.221924][ T1145] ? kthread+0x17d/0x730 [ 64.223255][ T1145] ? __pfx_worker_thread+0x10/0x10 [ 64.224867][ T1145] kthread+0x3b3/0x730 [ 64.226141][ T1145] ? __pfx_kthread+0x10/0x10 [ 64.227583][ T1145] ? ret_from_fork+0x79/0xaf0 [ 64.229460][ T1145] ? ret_from_fork+0x79/0xaf0 [ 64.230877][ T1145] ? rcu_is_watching+0x12/0xc0 [ 64.232390][ T1145] ? __pfx_kthread+0x10/0x10 [ 64.233879][ T1145] ret_from_fork+0x754/0xaf0 [ 64.235418][ T1145] ? __pfx_ret_from_fork+0x10/0x10 [ 64.237018][ T1145] ? __switch_to+0x7b9/0x10c0 [ 64.238720][ T1145] ? __pfx_kthread+0x10/0x10 [ 64.240449][ T1145] ret_from_fork_asm+0x1a/0x30 [ 64.241953][ T1145] [ 64.242911][ T1145] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 64.245176][ T1145] CPU: 0 UID: 0 PID: 1145 Comm: kworker/u32:5 Not tainted syzkaller #0 PREEMPT(full) [ 64.248198][ T1145] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 64.251393][ T1145] Workqueue: events_unbound cfg80211_wiphy_work [ 64.253359][ T1145] Call Trace: [ 64.254435][ T1145] [ 64.255412][ T1145] dump_stack_lvl+0x100/0x190 [ 64.256934][ T1145] vpanic+0x20d/0x630 [ 64.258273][ T1145] panic+0xd1/0xd1 [ 64.259496][ T1145] ? __pfx_panic+0x10/0x10 [ 64.260948][ T1145] ? check_panic_on_warn+0x1f/0x90 [ 64.262579][ T1145] check_panic_on_warn.cold+0x19/0x34 [ 64.264283][ T1145] ? __rate_control_send_low+0x610/0x760 [ 64.266064][ T1145] __warn.cold+0x191/0x2f8 [ 64.267535][ T1145] __report_bug+0x296/0x3d0 [ 64.269036][ T1145] ? __rate_control_send_low+0x610/0x760 [ 64.270849][ T1145] ? __pfx___report_bug+0x10/0x10 [ 64.272470][ T1145] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 64.274313][ T1145] ? lockdep_hardirqs_on+0x78/0x100 [ 64.275984][ T1145] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 64.278018][ T1145] report_bug_entry+0xe1/0x290 [ 64.279638][ T1145] ? __rate_control_send_low+0x621/0x760 [ 64.281535][ T1145] handle_bug+0x1c9/0x2a0 [ 64.282895][ T1145] exc_invalid_op+0x17/0x50 [ 64.284335][ T1145] asm_exc_invalid_op+0x1a/0x20 [ 64.286068][ T1145] RIP: 0010:__rate_control_send_low+0x621/0x760 [ 64.288406][ T1145] Code: f7 48 8b 44 24 10 8b ac a8 d4 00 00 00 e8 77 bb 18 f7 48 8d 3d f0 89 d9 05 44 8b 44 24 04 48 8b 74 24 10 45 89 f1 89 d9 89 ea <67> 48 0f b9 3a e9 2f fd ff ff 48 8b 7c 24 08 e8 9b 0c 83 f7 e9 03 [ 64.295047][ T1145] RSP: 0018:ffffc90006617430 EFLAGS: 00010293 [ 64.297477][ T1145] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 64.300207][ T1145] RDX: 000000000000000f RSI: ffff8880268a4ec0 RDI: ffffffff90c7c9e0 [ 64.302778][ T1145] RBP: 000000000000000f R08: 00000000ffffffff R09: 0000000000000010 [ 64.305686][ T1145] R10: 000000000000000c R11: 0000000000000000 R12: ffff88802bc063e8 [ 64.308682][ T1145] R13: ffff888034493128 R14: 0000000000000010 R15: dffffc0000000000 [ 64.311285][ T1145] rate_control_send_low+0x124/0x7e0 [ 64.313304][ T1145] rate_control_get_rate+0x1be/0x5c0 [ 64.315273][ T1145] ieee80211_tx_h_rate_ctrl+0x778/0x1a20 [ 64.317224][ T1145] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 64.319390][ T1145] ? sta_info_hash_lookup+0x259/0x660 [ 64.321332][ T1145] invoke_tx_handlers_late+0xfb4/0x2750 [ 64.323464][ T1145] ? ieee80211_queue_skb+0x3ae/0x1f60 [ 64.325100][ T1145] ? invoke_tx_handlers_late+0x12f0/0x2750 [ 64.326938][ T1145] ? invoke_tx_handlers_early+0x65d/0x27d0 [ 64.328820][ T1145] ieee80211_tx+0x304/0x460 [ 64.330222][ T1145] ? __pfx_ieee80211_tx+0x10/0x10 [ 64.331802][ T1145] ? ieee80211_skb_resize+0x119/0x670 [ 64.333440][ T1145] ? ieee80211_set_qos_hdr+0x2c1/0x3f0 [ 64.335202][ T1145] ieee80211_xmit+0x30f/0x3e0 [ 64.336725][ T1145] __ieee80211_tx_skb_tid_band+0x2c2/0x720 [ 64.338645][ T1145] ieee80211_scan_state_send_probe+0x33d/0xac0 [ 64.340613][ T1145] ieee80211_scan_work+0x750/0x1ff0 [ 64.342226][ T1145] ? do_raw_spin_lock+0x128/0x260 [ 64.343812][ T1145] ? __pfx_ieee80211_scan_work+0x10/0x10 [ 64.345491][ T1145] cfg80211_wiphy_work+0x3f7/0x560 [ 64.347057][ T1145] process_one_work+0x9c2/0x1840 [ 64.348634][ T1145] ? __pfx_process_one_work+0x10/0x10 [ 64.350293][ T1145] ? assign_work+0x19c/0x250 [ 64.351732][ T1145] worker_thread+0x5da/0xe40 [ 64.353180][ T1145] ? kthread+0x17d/0x730 [ 64.354531][ T1145] ? __pfx_worker_thread+0x10/0x10 [ 64.356109][ T1145] kthread+0x3b3/0x730 [ 64.357388][ T1145] ? __pfx_kthread+0x10/0x10 [ 64.358852][ T1145] ? ret_from_fork+0x79/0xaf0 [ 64.360330][ T1145] ? ret_from_fork+0x79/0xaf0 [ 64.361849][ T1145] ? rcu_is_watching+0x12/0xc0 [ 64.363423][ T1145] ? __pfx_kthread+0x10/0x10 [ 64.364919][ T1145] ret_from_fork+0x754/0xaf0 [ 64.366381][ T1145] ? __pfx_ret_from_fork+0x10/0x10 [ 64.368034][ T1145] ? __switch_to+0x7b9/0x10c0 [ 64.369619][ T1145] ? __pfx_kthread+0x10/0x10 [ 64.371465][ T1145] ret_from_fork_asm+0x1a/0x30 [ 64.373376][ T1145] [ 64.375355][ T1145] Kernel Offset: disabled [ 64.377046][ T1145] Rebooting in 86400 seconds..