Warning: Permanently added '[localhost]:9717' (ED25519) to the list of known hosts. [ 42.773567][ T43] kauditd_printk_skb: 17 callbacks suppressed [ 42.773581][ T43] audit: type=1400 audit(1791994064.909:138): avc: denied { execute } for pid=5723 comm="sh" name="syz-executor511301487" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 42.773953][ T43] audit: type=1400 audit(1791994064.909:139): avc: denied { execute_no_trans } for pid=5723 comm="sh" path="/syz-executor511301487" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 42.782396][ T43] audit: type=1400 audit(1791994064.919:140): avc: denied { execmem } for pid=5723 comm="syz-executor511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 42.801596][ T43] audit: type=1400 audit(1791994064.949:141): avc: denied { mounton } for pid=5723 comm="syz-executor511" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 42.801930][ T43] audit: type=1400 audit(1791994064.949:142): avc: denied { mount } for pid=5723 comm="syz-executor511" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 42.803645][ T43] audit: type=1400 audit(1791994064.949:143): avc: denied { create } for pid=5723 comm="syz-executor511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.803924][ T43] audit: type=1400 audit(1791994064.949:144): avc: denied { write } for pid=5723 comm="syz-executor511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.804210][ T43] audit: type=1400 audit(1791994064.949:145): avc: denied { read } for pid=5723 comm="syz-executor511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.829372][ T43] audit: type=1400 audit(1791994064.969:146): avc: denied { create } for pid=5726 comm="syz-executor511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 42.831606][ T43] audit: type=1400 audit(1791994064.969:147): avc: denied { read write } for pid=5726 comm="syz-executor511" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 42.845739][ T66] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 42.846517][ T66] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 42.846801][ T66] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 42.847154][ T66] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 42.847581][ T66] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 42.928313][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.928326][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.947660][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.947671][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 executing program [ 42.971024][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.971036][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.011434][ C1] ------------[ cut here ]------------ [ 43.011447][ C1] !oldest [ 43.011453][ C1] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x19d8/0x2450, CPU#1: ksoftirqd/1/29 [ 43.019159][ C1] Modules linked in: [ 43.020447][ C1] CPU: 1 UID: 0 PID: 29 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 43.023353][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 43.026737][ C1] RIP: 0010:__cfg80211_bss_update+0x19d8/0x2450 [ 43.028816][ C1] Code: 00 31 ff 41 89 c5 89 c6 e8 85 4d ea f6 45 85 ed 0f 85 65 f9 ff ff e8 07 53 ea f6 90 0f 0b 90 e9 57 f9 ff ff e8 f9 52 ea f6 90 <0f> 0b 90 e9 fc fa ff ff e8 eb 52 ea f6 48 8b 44 24 08 48 8d 88 ac [ 43.034486][ C1] RSP: 0018:ffffc90000687168 EFLAGS: 00010246 [ 43.036331][ C1] RAX: 0000000000000000 RBX: ffffffff92459a04 RCX: 0000000000000301 [ 43.038621][ C1] RDX: ffff888020a9a580 RSI: ffffffff8b220397 RDI: ffff888020a9a580 [ 43.040948][ C1] RBP: ffff888027580088 R08: 0000000000000005 R09: 0000000000000000 [ 43.043401][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888027580000 [ 43.046094][ C1] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff88803f300190 [ 43.049607][ C1] FS: 0000000000000000(0000) GS:ffff8880d4a46000(0000) knlGS:0000000000000000 [ 43.052854][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 43.055325][ C1] CR2: 00005587f1241000 CR3: 000000003594a000 CR4: 0000000000352ef0 [ 43.058241][ C1] Call Trace: [ 43.059456][ C1] [ 43.060508][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 43.062418][ C1] ? cfg80211_inform_single_bss_data+0x557/0x1dc0 [ 43.064838][ C1] cfg80211_inform_single_bss_data+0x770/0x1dc0 [ 43.067182][ C1] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 43.069632][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 43.071203][ C1] ? cfg80211_inform_bss_data+0x230/0x3c20 [ 43.073046][ C1] cfg80211_inform_bss_data+0x230/0x3c20 [ 43.074913][ C1] ? unwind_next_frame+0xbd/0x2090 [ 43.076554][ C1] ? find_held_lock+0x2b/0x80 [ 43.078046][ C1] ? unwind_next_frame+0x3be/0x2090 [ 43.079700][ C1] ? unwind_next_frame+0x3be/0x2090 [ 43.081346][ C1] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 43.083245][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 43.084888][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 43.086815][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 43.088398][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 43.090074][ C1] ? lock_acquire+0x1d1/0x380 [ 43.091936][ C1] ? unwind_next_frame+0xbd/0x2090 [ 43.093990][ C1] cfg80211_inform_bss_frame_data+0x245/0x7c0 [ 43.096480][ C1] ieee80211_bss_info_update+0x310/0xab0 [ 43.098697][ C1] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 43.101121][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 43.103076][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 43.105126][ C1] ? ieee80211_get_channel_khz+0x14a/0x1e0 [ 43.107293][ C1] ieee80211_scan_rx+0x4e6/0xb60 [ 43.109031][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 43.110611][ C1] __ieee80211_rx_handle_packet+0xbab/0xfc0 [ 43.112629][ C1] ? __pfx___ieee80211_rx_handle_packet+0x10/0x10 [ 43.115136][ C1] ? kcov_remote_start+0x3bf/0x6d0 [ 43.117072][ C1] ? lockdep_hardirqs_on+0x7d/0x110 [ 43.119032][ C1] ? ieee80211_clean_skb+0x1a7/0x740 [ 43.120965][ C1] ieee80211_rx_list+0xf19/0x2160 [ 43.122787][ C1] ? lock_acquire+0x1d1/0x380 [ 43.124501][ C1] ? ieee80211_rx_napi+0x9a/0x400 [ 43.126502][ C1] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 43.128501][ C1] ieee80211_rx_napi+0xdc/0x400 [ 43.130117][ C1] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 43.131714][ C1] ? lockdep_hardirqs_on+0x7d/0x110 [ 43.133925][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 43.136406][ C1] ieee80211_handle_queued_frames+0xc8/0x120 [ 43.138770][ C1] tasklet_action_common+0x2de/0x3d0 [ 43.140742][ C1] handle_softirqs+0x1e6/0x9d0 [ 43.142629][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 43.144670][ C1] ? run_ksoftirqd+0x5b/0x60 [ 43.146418][ C1] ? rcu_is_watching+0x13/0xc0 [ 43.148218][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 43.150230][ C1] run_ksoftirqd+0x38/0x60 [ 43.151830][ C1] smpboot_thread_fn+0x3d3/0xab0 [ 43.153871][ C1] ? kthread+0x13a/0x450 [ 43.155551][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 43.157646][ C1] kthread+0x373/0x450 [ 43.159258][ C1] ? __pfx_kthread+0x10/0x10 [ 43.160993][ C1] ret_from_fork+0x730/0xd60 [ 43.162810][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 43.164429][ C1] ? __switch_to+0x800/0x10f0 [ 43.165986][ C1] ? __pfx_kthread+0x10/0x10 [ 43.167556][ C1] ret_from_fork_asm+0x1a/0x30 [ 43.169336][ C1] [ 43.170490][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 43.173044][ C1] CPU: 1 UID: 0 PID: 29 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 43.176008][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 43.179210][ C1] Call Trace: [ 43.180290][ C1] [ 43.181254][ C1] dump_stack_lvl+0x100/0x190 [ 43.182754][ C1] vpanic+0x553/0x970 [ 43.184048][ C1] ? __pfx_vpanic+0x10/0x10 [ 43.185503][ C1] panic+0xd1/0xe0 [ 43.186708][ C1] ? __pfx_panic+0x10/0x10 [ 43.188117][ C1] check_panic_on_warn.cold+0x19/0x34 [ 43.189808][ C1] ? __cfg80211_bss_update+0x19d8/0x2450 [ 43.191566][ C1] __warn.cold+0x191/0x318 [ 43.192983][ C1] __report_bug+0x30f/0x440 [ 43.194509][ C1] ? __cfg80211_bss_update+0x19d8/0x2450 [ 43.196640][ C1] ? __pfx___report_bug+0x10/0x10 [ 43.198254][ C1] ? __cfg80211_bss_update+0x19d8/0x2450 [ 43.200115][ C1] report_bug+0xb3/0x220 [ 43.201513][ C1] ? __cfg80211_bss_update+0x19d8/0x2450 [ 43.203382][ C1] handle_bug+0x16a/0x2a0 [ 43.205002][ C1] exc_invalid_op+0x17/0x50 [ 43.206662][ C1] asm_exc_invalid_op+0x1a/0x20 [ 43.208270][ C1] RIP: 0010:__cfg80211_bss_update+0x19d8/0x2450 [ 43.210261][ C1] Code: 00 31 ff 41 89 c5 89 c6 e8 85 4d ea f6 45 85 ed 0f 85 65 f9 ff ff e8 07 53 ea f6 90 0f 0b 90 e9 57 f9 ff ff e8 f9 52 ea f6 90 <0f> 0b 90 e9 fc fa ff ff e8 eb 52 ea f6 48 8b 44 24 08 48 8d 88 ac [ 43.216809][ C1] RSP: 0018:ffffc90000687168 EFLAGS: 00010246 [ 43.219098][ C1] RAX: 0000000000000000 RBX: ffffffff92459a04 RCX: 0000000000000301 [ 43.221600][ C1] RDX: ffff888020a9a580 RSI: ffffffff8b220397 RDI: ffff888020a9a580 [ 43.224108][ C1] RBP: ffff888027580088 R08: 0000000000000005 R09: 0000000000000000 [ 43.226611][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888027580000 [ 43.229760][ C1] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff88803f300190 [ 43.232678][ C1] ? __cfg80211_bss_update+0x19d7/0x2450 [ 43.234479][ C1] ? __cfg80211_bss_update+0x19d7/0x2450 [ 43.236369][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 43.238245][ C1] ? cfg80211_inform_single_bss_data+0x557/0x1dc0 [ 43.240504][ C1] cfg80211_inform_single_bss_data+0x770/0x1dc0 [ 43.242648][ C1] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 43.244910][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 43.246607][ C1] ? cfg80211_inform_bss_data+0x230/0x3c20 [ 43.248603][ C1] cfg80211_inform_bss_data+0x230/0x3c20 [ 43.250576][ C1] ? unwind_next_frame+0xbd/0x2090 [ 43.252192][ C1] ? find_held_lock+0x2b/0x80 [ 43.253692][ C1] ? unwind_next_frame+0x3be/0x2090 [ 43.255393][ C1] ? unwind_next_frame+0x3be/0x2090 [ 43.257058][ C1] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 43.258984][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 43.260549][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 43.262485][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 43.264054][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 43.265680][ C1] ? lock_acquire+0x1d1/0x380 [ 43.267184][ C1] ? unwind_next_frame+0xbd/0x2090 [ 43.268829][ C1] cfg80211_inform_bss_frame_data+0x245/0x7c0 [ 43.270742][ C1] ieee80211_bss_info_update+0x310/0xab0 [ 43.272500][ C1] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 43.274429][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 43.276342][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 43.277925][ C1] ? ieee80211_get_channel_khz+0x14a/0x1e0 [ 43.279771][ C1] ieee80211_scan_rx+0x4e6/0xb60 [ 43.281334][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 43.282895][ C1] __ieee80211_rx_handle_packet+0xbab/0xfc0 [ 43.284760][ C1] ? __pfx___ieee80211_rx_handle_packet+0x10/0x10 [ 43.287078][ C1] ? kcov_remote_start+0x3bf/0x6d0 [ 43.288727][ C1] ? lockdep_hardirqs_on+0x7d/0x110 [ 43.290358][ C1] ? ieee80211_clean_skb+0x1a7/0x740 [ 43.292009][ C1] ieee80211_rx_list+0xf19/0x2160 [ 43.293597][ C1] ? lock_acquire+0x1d1/0x380 [ 43.295108][ C1] ? ieee80211_rx_napi+0x9a/0x400 [ 43.296660][ C1] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 43.298563][ C1] ieee80211_rx_napi+0xdc/0x400 [ 43.300218][ C1] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 43.301865][ C1] ? lockdep_hardirqs_on+0x7d/0x110 [ 43.303488][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 43.305335][ C1] ieee80211_handle_queued_frames+0xc8/0x120 [ 43.307226][ C1] tasklet_action_common+0x2de/0x3d0 [ 43.308910][ C1] handle_softirqs+0x1e6/0x9d0 [ 43.310755][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 43.312970][ C1] ? run_ksoftirqd+0x5b/0x60 [ 43.314758][ C1] ? rcu_is_watching+0x13/0xc0 [ 43.316325][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 43.317949][ C1] run_ksoftirqd+0x38/0x60 [ 43.319383][ C1] smpboot_thread_fn+0x3d3/0xab0 [ 43.320946][ C1] ? kthread+0x13a/0x450 [ 43.322283][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 43.323998][ C1] kthread+0x373/0x450 [ 43.325391][ C1] ? __pfx_kthread+0x10/0x10 [ 43.326942][ C1] ret_from_fork+0x730/0xd60 [ 43.328461][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 43.330106][ C1] ? __switch_to+0x800/0x10f0 [ 43.331607][ C1] ? __pfx_kthread+0x10/0x10 [ 43.333083][ C1] ret_from_fork_asm+0x1a/0x30 [ 43.334604][ C1] [ 43.336295][ C1] Kernel Offset: disabled [ 43.337661][ C1] Rebooting in 86400 seconds..