last executing test programs: 208.150558ms ago: executing program 3 (id=4): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@alg={0xe0, 0x10, 0x1, 0x0, 0x0, {{'pcrypt(gcm(aes))\x00'}, '\x00', '\x00', 0x3, 0xf}}, 0xe0}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r1, 0x5) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000010)={0x2, 0x4e20, @loopback}, 0x10) r3 = accept(r1, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000020), 0x4) setsockopt$inet_tcp_TLS_RX(r3, 0x11a, 0x2, &(0x7f0000000040)=@gcm_128={{0x303}}, 0x28) sendto$inet(r2, &(0x7f0000000200)="1703030028000000000000000100000000000000000000000000000000ffffffffffffffffffffffffffffffff", 0x2d, 0x0, 0x0, 0x0) recvmsg(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)=""/64, 0x40}], 0x1}, 0x0) 177.666997ms ago: executing program 1 (id=2): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4321, @loopback}, 0x10) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) connect$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4321, @loopback}}, 0x24) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000010010000010000000100000000000000"], 0x18}, 0x0) recvfrom(r0, &(0x7f0000000300)=""/256, 0x100, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(r3, &(0x7f0000000500)="0000000000000000000000020600000000000001", 0x14) read(r2, &(0x7f0000000308), 0x14) sendto$inet(r0, &(0x7f0000000300), 0x1c, 0x0, &(0x7f00000000c0)={0x2, 0x1234, @loopback}, 0x10) recvmsg(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000800)=""/256, 0x100}], 0x1, &(0x7f0000000900)=""/256, 0x100}, 0x0) 74.755599ms ago: executing program 0 (id=1): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x5c, 0x2c, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff3, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1, 0x2}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x1019}, {0x1019}}}]}}]}]}]}}]}, 0x5c}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000400)="01020304", 0x4, 0x0, &(0x7f0000000500)={0x2, 0x1234, @loopback}, 0x10) 43.781077ms ago: executing program 1 (id=5): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./debug\x00', &(0x7f0000000400)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='100 1 1\x00', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./debug/netdevsim/netdevsim100/take_snapshot\x00', 0x1, 0x0) write(r1, &(0x7f0000000800)='1\x00', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/bus/netdevsim/del_device\x00', 0x1, 0x0) write(r2, &(0x7f0000000a00)='100\x00', 0x4) close(r2) 39.942213ms ago: executing program 2 (id=3): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x130, 0x1c8, 0xffffffff, 0xffffffff, 0x98, 0x130, 0x1c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xf, 0x7, 0x5b4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) syz_emit_ethernet(0x42, &(0x7f00000002c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x1000, 0x2000, 0x1, 0x0, 0x0, 0x0, 0x8, 0x2, 0xffff, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x11223344}]}}}}}}}, 0x0) 0s ago: executing program 3 (id=6): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/cfg80211/parameters/bss_entries_limit\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='1\n', 0x2) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000003540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000080)={0x54, r2, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x35, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, {0xe}, @broadcast, @device_a, @random="2668e8a3b755", {0x8, 0x6}}, 0x1, @random=0x5, 0x7683, @void, @void, @void, @val={0x4, 0x6, {0x2, 0x7, 0x2, 0x8337}}, @void, @val={0x5, 0x3, {0xf1, 0xff, 0x1}}, @void, @void, @void, @void, @void, @void, @void}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040040}, 0x8800) nanosleep(&(0x7f0000000800)={0x0, 0x2faf080}, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000003800)={&(0x7f0000000880)={0x54, r2, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x35, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, {0xe}, @broadcast, @device_b, @random="2668e8a3b756", {0x8, 0x6}}, 0x1, @random=0x5, 0x7683, @void, @void, @void, @val={0x4, 0x6, {0x2, 0x7, 0x2, 0x8337}}, @void, @val={0x5, 0x3, {0xf1, 0xff, 0x1}}, @void, @void, @void, @void, @void, @void, @void}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040040}, 0x8800) nanosleep(&(0x7f0000000800)={0x0, 0x2faf080}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:61606' (ED25519) to the list of known hosts. [ 40.159184][ T43] kauditd_printk_skb: 17 callbacks suppressed [ 40.159204][ T43] audit: type=1400 audit(1790053384.692:138): avc: denied { name_bind } for pid=5717 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 40.200375][ T43] audit: type=1400 audit(1790053384.732:139): avc: denied { execute } for pid=5718 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 40.201000][ T43] audit: type=1400 audit(1790053384.732:140): avc: denied { execute_no_trans } for pid=5718 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 42.350439][ T43] audit: type=1400 audit(1790053386.882:141): avc: denied { mounton } for pid=5718 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 42.350898][ T43] audit: type=1400 audit(1790053386.882:142): avc: denied { mount } for pid=5718 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.352869][ T5718] cgroup: Unknown subsys name 'net' [ 42.354284][ T43] audit: type=1400 audit(1790053386.882:143): avc: denied { unmount } for pid=5718 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.518479][ T5718] cgroup: Unknown subsys name 'cpuset' [ 42.520705][ T5718] cgroup: Unknown subsys name 'rlimit' [ 42.669105][ T43] audit: type=1400 audit(1790053387.202:144): avc: denied { setattr } for pid=5718 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.671586][ T43] audit: type=1400 audit(1790053387.202:145): avc: denied { create } for pid=5718 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.671613][ T43] audit: type=1400 audit(1790053387.202:146): avc: denied { write } for pid=5718 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.671631][ T43] audit: type=1400 audit(1790053387.202:147): avc: denied { read } for pid=5718 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.740178][ T5723] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 43.410677][ T5718] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 47.362958][ T43] kauditd_printk_skb: 10 callbacks suppressed [ 47.362970][ T43] audit: type=1400 audit(1790053391.892:158): avc: denied { execmem } for pid=5726 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 47.563341][ T43] audit: type=1400 audit(1790053392.092:159): avc: denied { create } for pid=5729 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.565731][ T43] audit: type=1400 audit(1790053392.092:160): avc: denied { read write } for pid=5729 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.565779][ T43] audit: type=1400 audit(1790053392.092:161): avc: denied { open } for pid=5729 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.575455][ T43] audit: type=1400 audit(1790053392.102:162): avc: denied { ioctl } for pid=5729 comm="syz-executor" path="socket:[7700]" dev="sockfs" ino=7700 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.584320][ T65] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 47.586344][ T5730] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 47.586519][ T5730] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 47.587358][ T5735] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 47.587749][ T5735] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 47.587895][ T5735] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 47.588494][ T5735] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 47.588721][ T5735] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 47.591232][ T5730] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 47.592041][ T5730] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 47.603086][ T43] audit: type=1400 audit(1790053392.132:163): avc: denied { open } for pid=5729 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.604124][ T43] audit: type=1400 audit(1790053392.132:164): avc: denied { mounton } for pid=5729 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 47.605955][ T43] audit: type=1400 audit(1790053392.132:165): avc: denied { read } for pid=5732 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.607935][ T43] audit: type=1400 audit(1790053392.142:166): avc: denied { module_request } for pid=5729 comm="syz-executor" kmod="netdev-nr3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 47.624450][ T43] audit: type=1400 audit(1790053392.152:167): avc: denied { sys_module } for pid=5729 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 47.635025][ T5730] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 47.639946][ T65] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 47.640773][ T65] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 47.641765][ T65] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 47.642901][ T5092] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 47.643130][ T65] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 47.643485][ T65] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 47.644592][ T5092] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 47.647030][ T65] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 47.648139][ T65] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 48.139945][ T5729] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.140394][ T5729] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.140463][ T5729] bridge_slave_0: entered allmulticast mode [ 48.141247][ T5729] bridge_slave_0: entered promiscuous mode [ 48.174241][ T5729] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.174311][ T5729] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.174396][ T5729] bridge_slave_1: entered allmulticast mode [ 48.175573][ T5729] bridge_slave_1: entered promiscuous mode [ 48.278056][ T5729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.302689][ T5729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.328856][ T5744] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.328966][ T5744] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.329057][ T5744] bridge_slave_0: entered allmulticast mode [ 48.330332][ T5744] bridge_slave_0: entered promiscuous mode [ 48.337221][ T5744] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.337299][ T5744] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.337403][ T5744] bridge_slave_1: entered allmulticast mode [ 48.339163][ T5744] bridge_slave_1: entered promiscuous mode [ 48.351325][ T5737] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.351403][ T5737] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.351504][ T5737] bridge_slave_0: entered allmulticast mode [ 48.352845][ T5737] bridge_slave_0: entered promiscuous mode [ 48.356709][ T5737] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.356773][ T5737] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.357044][ T5737] bridge_slave_1: entered allmulticast mode [ 48.358476][ T5737] bridge_slave_1: entered promiscuous mode [ 48.371458][ T5732] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.371535][ T5732] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.371632][ T5732] bridge_slave_0: entered allmulticast mode [ 48.372993][ T5732] bridge_slave_0: entered promiscuous mode [ 48.375817][ T5732] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.375891][ T5732] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.376341][ T5732] bridge_slave_1: entered allmulticast mode [ 48.377654][ T5732] bridge_slave_1: entered promiscuous mode [ 48.385492][ T5729] team0: Port device team_slave_0 added [ 48.411871][ T5729] team0: Port device team_slave_1 added [ 48.434908][ T5732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.442431][ T5729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.442441][ T5729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.442454][ T5729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.444262][ T5744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.446631][ T5744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.448010][ T5737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.449156][ T5732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.450151][ T5737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.458450][ T5729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.458463][ T5729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.458481][ T5729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.483288][ T5732] team0: Port device team_slave_0 added [ 48.508008][ T5732] team0: Port device team_slave_1 added [ 48.509745][ T5744] team0: Port device team_slave_0 added [ 48.510859][ T5737] team0: Port device team_slave_0 added [ 48.512472][ T5744] team0: Port device team_slave_1 added [ 48.525880][ T5737] team0: Port device team_slave_1 added [ 48.546765][ T5729] hsr_slave_0: entered promiscuous mode [ 48.547646][ T5729] hsr_slave_1: entered promiscuous mode [ 48.559350][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.559365][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.559385][ T5732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.584525][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.584536][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.584549][ T5732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.590335][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.590344][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.590356][ T5737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.591326][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.591333][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.591345][ T5744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.591804][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.591813][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.591825][ T5737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.601053][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.601069][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.601082][ T5744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.640128][ T5732] hsr_slave_0: entered promiscuous mode [ 48.640579][ T5732] hsr_slave_1: entered promiscuous mode [ 48.641116][ T5732] debugfs: 'hsr0' already exists in 'hsr' [ 48.641173][ T5732] Cannot create hsr debugfs directory [ 48.693458][ T5744] hsr_slave_0: entered promiscuous mode [ 48.693893][ T5744] hsr_slave_1: entered promiscuous mode [ 48.694190][ T5744] debugfs: 'hsr0' already exists in 'hsr' [ 48.694202][ T5744] Cannot create hsr debugfs directory [ 48.707731][ T5737] hsr_slave_0: entered promiscuous mode [ 48.708518][ T5737] hsr_slave_1: entered promiscuous mode [ 48.708816][ T5737] debugfs: 'hsr0' already exists in 'hsr' [ 48.708827][ T5737] Cannot create hsr debugfs directory [ 48.966215][ T5729] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.970938][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.972590][ T5729] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.978846][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.979409][ T5729] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.983028][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.015031][ T5729] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 49.017068][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.055664][ T5732] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 49.057937][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.063363][ T5732] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 49.066376][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.067370][ T5732] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 49.070553][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.071659][ T5732] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 49.077326][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.134056][ T5744] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.138594][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.138954][ T5744] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.141216][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.151426][ T5744] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.156539][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.156929][ T5744] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.161405][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.214323][ T5737] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 49.217441][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.224485][ T5729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.225128][ T5737] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 49.228621][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.237231][ T5737] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 49.238990][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.240259][ T5737] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 49.241682][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.263935][ T5732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.274334][ T5729] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.284968][ T227] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.285153][ T227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.302221][ T227] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.302275][ T227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.304846][ T5732] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.314915][ T227] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.314961][ T227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.316652][ T227] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.316709][ T227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.352262][ T5744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.387175][ T5737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.399852][ T5744] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.412898][ T227] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.412981][ T227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.423758][ T227] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.423837][ T227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.435015][ T5737] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.445317][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.445403][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.464687][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.464780][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.607560][ T65] Bluetooth: hci0: command tx timeout [ 49.607768][ T5730] Bluetooth: hci1: command tx timeout [ 49.689194][ T5730] Bluetooth: hci3: command tx timeout [ 49.689437][ T5730] Bluetooth: hci2: command tx timeout [ 49.731717][ T5729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.743933][ T5732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.788435][ T5729] veth0_vlan: entered promiscuous mode [ 49.811758][ T5732] veth0_vlan: entered promiscuous mode [ 49.813656][ T5729] veth1_vlan: entered promiscuous mode [ 49.824574][ T5732] veth1_vlan: entered promiscuous mode [ 49.843988][ T5744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.861980][ T5729] veth0_macvtap: entered promiscuous mode [ 49.862875][ T5732] veth0_macvtap: entered promiscuous mode [ 49.865424][ T5732] veth1_macvtap: entered promiscuous mode [ 49.868770][ T5729] veth1_macvtap: entered promiscuous mode [ 49.872580][ T5737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.892416][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.899007][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.900079][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.918463][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.937036][ T5744] veth0_vlan: entered promiscuous mode [ 49.948034][ T5777] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.972061][ T5744] veth1_vlan: entered promiscuous mode [ 49.973035][ T5737] veth0_vlan: entered promiscuous mode [ 50.029757][ T5737] veth1_vlan: entered promiscuous mode [ 50.036760][ T5826] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.036796][ T5826] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.036814][ T5826] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.036832][ T5826] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.036850][ T5826] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.036868][ T5826] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.036885][ T5826] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.040606][ T1080] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.040623][ T1080] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.045738][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.045757][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.067778][ T5744] veth0_macvtap: entered promiscuous mode [ 50.077260][ T1080] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.077273][ T1080] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.086513][ T5744] veth1_macvtap: entered promiscuous mode [ 50.102207][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.102221][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.102684][ T5737] veth0_macvtap: entered promiscuous mode [ 50.109269][ T5737] veth1_macvtap: entered promiscuous mode [ 50.112954][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.134767][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.144856][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.150305][ T5729] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 50.152748][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.225111][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.225127][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.235714][ T5777] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.235741][ T5777] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.235764][ T5777] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.235782][ T5777] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.251480][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.251775][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.251955][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.252201][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.278189][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.278203][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.291530][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.291543][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.311910][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.311924][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.398226][ T5890] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 50.431033][ T5892] ip_tables: iptables: counters copy to user failed while replacing table [ 50.445304][ C3] ------------[ cut here ]------------ [ 50.445313][ C3] !oldest [ 50.445317][ C3] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x19d8/0x2450, CPU#3: syz.3.6/5893 [ 50.451025][ C3] Modules linked in: [ 50.452266][ C3] CPU: 3 UID: 0 PID: 5893 Comm: syz.3.6 Not tainted syzkaller #0 PREEMPT(full) [ 50.454954][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 50.457852][ C3] RIP: 0010:__cfg80211_bss_update+0x19d8/0x2450 [ 50.459600][ C3] Code: 00 31 ff 41 89 c5 89 c6 e8 45 de ec f6 45 85 ed 0f 85 65 f9 ff ff e8 c7 e3 ec f6 90 0f 0b 90 e9 57 f9 ff ff e8 b9 e3 ec f6 90 <0f> 0b 90 e9 fc fa ff ff e8 ab e3 ec f6 48 8b 44 24 08 48 8d 88 ac [ 50.465818][ C3] RSP: 0018:ffffc90000708368 EFLAGS: 00010287 [ 50.467582][ C3] RAX: 00000000000000d2 RBX: ffffffff91457604 RCX: ffffc90002558000 [ 50.469828][ C3] RDX: 0000000000040000 RSI: ffffffff8b1f3ed7 RDI: ffff888035350000 [ 50.472238][ C3] RBP: ffff8880369a0888 R08: 0000000000000005 R09: 0000000000000000 [ 50.472916][ T5896] bridge_slave_0: left allmulticast mode [ 50.472931][ T5896] bridge_slave_0: left promiscuous mode [ 50.473385][ T5896] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.479812][ C3] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880369a0800 [ 50.482057][ C3] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff88805a6a0190 [ 50.484381][ C3] FS: 00007f486abf66c0(0000) GS:ffff8880d5e53000(0000) knlGS:0000000000000000 [ 50.487250][ C3] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 50.489176][ C3] CR2: 0000001b33211ff8 CR3: 000000005aa6f000 CR4: 0000000000352ef0 [ 50.491464][ C3] Call Trace: [ 50.492477][ C3] [ 50.493314][ C3] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 50.494907][ C3] ? cfg80211_inform_single_bss_data+0x557/0x1dc0 [ 50.496795][ C3] cfg80211_inform_single_bss_data+0x770/0x1dc0 [ 50.498536][ C3] ? __pfx_stack_trace_save+0x10/0x10 [ 50.500107][ C3] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 50.502153][ C3] ? kasan_save_stack+0x3f/0x50 [ 50.503568][ C3] ? kasan_save_stack+0x30/0x50 [ 50.505012][ C3] ? kasan_save_track+0x14/0x30 [ 50.506484][ C3] ? __lock_acquire+0x5c0/0x1f40 [ 50.507912][ C3] ? cfg80211_inform_bss_data+0x230/0x3c20 [ 50.509604][ C3] cfg80211_inform_bss_data+0x230/0x3c20 [ 50.511241][ C3] ? unwind_next_frame+0xbd/0x2090 [ 50.512713][ C3] ? lock_acquire+0x1d1/0x380 [ 50.514178][ C3] ? is_bpf_text_address+0x25/0x1a0 [ 50.515860][ C3] ? find_held_lock+0x2b/0x80 [ 50.517216][ C3] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 50.518962][ C3] ? is_bpf_text_address+0x8a/0x1a0 [ 50.520496][ C3] ? bpf_ksym_find+0x128/0x1c0 [ 50.521877][ C3] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 50.523652][ C3] ? __lock_acquire+0x5c0/0x1f40 [ 50.525120][ C3] ? __lock_acquire+0x5c0/0x1f40 [ 50.526583][ C3] ? __lock_acquire+0x5c0/0x1f40 [ 50.527924][ C3] ? is_bpf_text_address+0x25/0x1a0 [ 50.529348][ C3] ? find_held_lock+0x2b/0x80 [ 50.530718][ C3] ? is_bpf_text_address+0x8a/0x1a0 [ 50.532225][ C3] ? is_bpf_text_address+0x8a/0x1a0 [ 50.533725][ C3] cfg80211_inform_bss_frame_data+0x245/0x7c0 [ 50.535503][ C3] ieee80211_bss_info_update+0x310/0xab0 [ 50.537160][ C3] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 50.538908][ C3] ? stack_depot_save_flags+0x27/0x9f0 [ 50.540464][ C3] ? __lock_acquire+0x5c0/0x1f40 [ 50.541869][ C3] ? ieee80211_get_channel_khz+0x14a/0x1e0 [ 50.543593][ C3] ieee80211_scan_rx+0x4e6/0xb60 [ 50.545048][ C3] ? __lock_acquire+0x5c0/0x1f40 [ 50.546541][ C3] __ieee80211_rx_handle_packet+0xbab/0xfc0 [ 50.548234][ C3] ? __pfx___ieee80211_rx_handle_packet+0x10/0x10 [ 50.549995][ C3] ? kcov_remote_start+0x3bf/0x6d0 [ 50.551469][ C3] ? lockdep_hardirqs_on+0x7d/0x110 [ 50.553109][ C3] ? ieee80211_clean_skb+0x1a7/0x740 [ 50.554713][ C3] ieee80211_rx_list+0xf19/0x2160 [ 50.556282][ C3] ? lock_acquire+0x1d1/0x380 [ 50.557855][ C3] ? ieee80211_rx_napi+0x9a/0x400 [ 50.559323][ C3] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 50.560880][ C3] ieee80211_rx_napi+0xdc/0x400 [ 50.562289][ C3] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 50.563881][ C3] ? lockdep_hardirqs_on+0x7d/0x110 [ 50.565441][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 50.567147][ C3] ieee80211_handle_queued_frames+0xc8/0x120 [ 50.568837][ C3] tasklet_action_common+0x2de/0x3d0 [ 50.570322][ C3] handle_softirqs+0x1e6/0x9d0 [ 50.571689][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 50.573128][ C3] ? irqtime_account_delta+0x9a/0x110 [ 50.574555][ C3] ? __ieee80211_tx_skb_tid_band+0x2dc/0x720 [ 50.576263][ C3] do_softirq+0xaf/0xf0 [ 50.577755][ C3] [ 50.578630][ C3] [ 50.579454][ C3] __local_bh_enable_ip+0xff/0x120 [ 50.580857][ C3] ieee80211_tx_skb_tid+0x1c4/0x550 [ 50.582512][ C3] ieee80211_mgmt_tx+0x143e/0x26a0 [ 50.584042][ C3] ? __alloc_skb+0xd0/0x710 [ 50.585411][ C3] ? __pfx_ieee80211_mgmt_tx+0x10/0x10 [ 50.587077][ C3] cfg80211_mlme_mgmt_tx+0x800/0x15b0 [ 50.588628][ C3] nl80211_tx_mgmt+0xa73/0x1010 [ 50.590023][ C3] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 50.591617][ C3] ? nl80211_pre_doit+0x19a/0xae0 [ 50.593206][ C3] genl_family_rcv_msg_doit+0x214/0x300 [ 50.594863][ C3] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 50.596678][ C3] ? bpf_lsm_capable+0x9/0x10 [ 50.598015][ C3] ? security_capable+0x80/0x260 [ 50.599533][ C3] ? ns_capable+0xd2/0xf0 [ 50.600732][ C3] genl_rcv_msg+0x560/0x800 [ 50.602006][ C3] ? __pfx_genl_rcv_msg+0x10/0x10 [ 50.603424][ C3] ? __lock_acquire+0x5c0/0x1f40 [ 50.604887][ C3] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 50.606481][ C3] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 50.608028][ C3] ? __pfx_nl80211_post_doit+0x10/0x10 [ 50.609722][ C3] netlink_rcv_skb+0x159/0x420 [ 50.611129][ C3] ? __pfx_genl_rcv_msg+0x10/0x10 [ 50.612580][ C3] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 50.614122][ C3] ? netlink_deliver_tap+0x1ae/0xcc0 [ 50.615840][ C3] genl_rcv+0x28/0x40 [ 50.616953][ C3] netlink_unicast+0x585/0x850 [ 50.618343][ C3] ? __pfx_netlink_unicast+0x10/0x10 [ 50.619831][ C3] netlink_sendmsg+0x8b0/0xda0 [ 50.621225][ C3] ? __pfx_netlink_sendmsg+0x10/0x10 [ 50.622794][ C3] ? selinux_socket_sendmsg+0x198/0x2f0 [ 50.624415][ C3] ____sys_sendmsg+0xa4d/0xbe0 [ 50.625909][ C3] ? __pfx_netlink_sendmsg+0x10/0x10 [ 50.627447][ C3] ? __pfx_____sys_sendmsg+0x10/0x10 [ 50.628965][ C3] ___sys_sendmsg+0x190/0x1e0 [ 50.630327][ C3] ? __pfx____sys_sendmsg+0x10/0x10 [ 50.631819][ C3] ? futex_wait+0x11e/0x370 [ 50.633123][ C3] ? find_held_lock+0x2b/0x80 [ 50.634536][ C3] __sys_sendmsg+0x160/0x210 [ 50.635934][ C3] ? __pfx___sys_sendmsg+0x10/0x10 [ 50.637403][ C3] do_syscall_64+0x123/0x790 [ 50.638737][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.640514][ C3] RIP: 0033:0x7f486c99e159 [ 50.641813][ C3] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.647329][ C3] RSP: 002b:00007f486abf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 50.649635][ C3] RAX: ffffffffffffffda RBX: 00007f486cc25fa0 RCX: 00007f486c99e159 [ 50.651903][ C3] RDX: 0000000000008800 RSI: 0000200000003740 RDI: 0000000000000003 [ 50.654176][ C3] RBP: 00007f486ca3506b R08: 0000000000000000 R09: 0000000000000000 [ 50.656504][ C3] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 50.658740][ C3] R13: 00007f486cc26038 R14: 00007f486cc25fa0 R15: 00007fffb89935f8 [ 50.661000][ C3] [ 50.661909][ C3] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 50.664016][ C3] CPU: 3 UID: 0 PID: 5893 Comm: syz.3.6 Not tainted syzkaller #0 PREEMPT(full) [ 50.666584][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 50.669232][ C3] Call Trace: [ 50.670117][ C3] [ 50.670873][ C3] dump_stack_lvl+0x100/0x190 [ 50.672064][ C3] vpanic+0x553/0x970 [ 50.673081][ C3] ? __pfx_vpanic+0x10/0x10 [ 50.674268][ C3] panic+0xd1/0xe0 [ 50.675222][ C3] ? __pfx_panic+0x10/0x10 [ 50.676353][ C3] check_panic_on_warn.cold+0x19/0x34 [ 50.677690][ C3] ? __cfg80211_bss_update+0x19d8/0x2450 [ 50.679099][ C3] __warn.cold+0x191/0x318 [ 50.680239][ C3] __report_bug+0x30f/0x440 [ 50.681394][ C3] ? __cfg80211_bss_update+0x19d8/0x2450 [ 50.682804][ C3] ? __pfx___report_bug+0x10/0x10 [ 50.684263][ C3] ? netlink_sendmsg+0x8b0/0xda0 [ 50.685663][ C3] ? ____sys_sendmsg+0xa4d/0xbe0 [ 50.687052][ C3] ? ___sys_sendmsg+0x190/0x1e0 [ 50.688411][ C3] ? __sys_sendmsg+0x160/0x210 [ 50.689744][ C3] ? do_syscall_64+0x123/0x790 [ 50.691100][ C3] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.692808][ C3] ? __cfg80211_bss_update+0x19d8/0x2450 [ 50.694465][ C3] report_bug+0xb3/0x220 [ 50.695703][ C3] ? __cfg80211_bss_update+0x19d8/0x2450 [ 50.697320][ C3] handle_bug+0x16a/0x2a0 [ 50.698580][ C3] exc_invalid_op+0x17/0x50 [ 50.699865][ C3] asm_exc_invalid_op+0x1a/0x20 [ 50.701255][ C3] RIP: 0010:__cfg80211_bss_update+0x19d8/0x2450 [ 50.703031][ C3] Code: 00 31 ff 41 89 c5 89 c6 e8 45 de ec f6 45 85 ed 0f 85 65 f9 ff ff e8 c7 e3 ec f6 90 0f 0b 90 e9 57 f9 ff ff e8 b9 e3 ec f6 90 <0f> 0b 90 e9 fc fa ff ff e8 ab e3 ec f6 48 8b 44 24 08 48 8d 88 ac [ 50.708371][ C3] RSP: 0018:ffffc90000708368 EFLAGS: 00010287 [ 50.710112][ C3] RAX: 00000000000000d2 RBX: ffffffff91457604 RCX: ffffc90002558000 [ 50.712361][ C3] RDX: 0000000000040000 RSI: ffffffff8b1f3ed7 RDI: ffff888035350000 [ 50.714627][ C3] RBP: ffff8880369a0888 R08: 0000000000000005 R09: 0000000000000000 [ 50.716863][ C3] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880369a0800 [ 50.719094][ C3] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff88805a6a0190 [ 50.721328][ C3] ? __cfg80211_bss_update+0x19d7/0x2450 [ 50.722951][ C3] ? __cfg80211_bss_update+0x19d7/0x2450 [ 50.724591][ C3] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 50.726089][ C3] ? cfg80211_inform_single_bss_data+0x557/0x1dc0 [ 50.727865][ C3] cfg80211_inform_single_bss_data+0x770/0x1dc0 [ 50.729557][ C3] ? __pfx_stack_trace_save+0x10/0x10 [ 50.731137][ C3] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 50.733037][ C3] ? kasan_save_stack+0x3f/0x50 [ 50.734477][ C3] ? kasan_save_stack+0x30/0x50 [ 50.735887][ C3] ? kasan_save_track+0x14/0x30 [ 50.737306][ C3] ? __lock_acquire+0x5c0/0x1f40 [ 50.738760][ C3] ? cfg80211_inform_bss_data+0x230/0x3c20 [ 50.740428][ C3] cfg80211_inform_bss_data+0x230/0x3c20 [ 50.742034][ C3] ? unwind_next_frame+0xbd/0x2090 [ 50.743636][ C3] ? lock_acquire+0x1d1/0x380 [ 50.745048][ C3] ? is_bpf_text_address+0x25/0x1a0 [ 50.746539][ C3] ? find_held_lock+0x2b/0x80 [ 50.747853][ C3] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 50.749586][ C3] ? is_bpf_text_address+0x8a/0x1a0 [ 50.751070][ C3] ? bpf_ksym_find+0x128/0x1c0 [ 50.752488][ C3] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 50.754229][ C3] ? __lock_acquire+0x5c0/0x1f40 [ 50.755648][ C3] ? __lock_acquire+0x5c0/0x1f40 [ 50.757026][ C3] ? __lock_acquire+0x5c0/0x1f40 [ 50.758410][ C3] ? is_bpf_text_address+0x25/0x1a0 [ 50.759880][ C3] ? find_held_lock+0x2b/0x80 [ 50.761231][ C3] ? is_bpf_text_address+0x8a/0x1a0 [ 50.762731][ C3] ? is_bpf_text_address+0x8a/0x1a0 [ 50.764249][ C3] cfg80211_inform_bss_frame_data+0x245/0x7c0 [ 50.766036][ C3] ieee80211_bss_info_update+0x310/0xab0 [ 50.767685][ C3] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 50.769445][ C3] ? stack_depot_save_flags+0x27/0x9f0 [ 50.771027][ C3] ? __lock_acquire+0x5c0/0x1f40 [ 50.772455][ C3] ? ieee80211_get_channel_khz+0x14a/0x1e0 [ 50.774173][ C3] ieee80211_scan_rx+0x4e6/0xb60 [ 50.775610][ C3] ? __lock_acquire+0x5c0/0x1f40 [ 50.777023][ C3] __ieee80211_rx_handle_packet+0xbab/0xfc0 [ 50.778714][ C3] ? __pfx___ieee80211_rx_handle_packet+0x10/0x10 [ 50.780570][ C3] ? kcov_remote_start+0x3bf/0x6d0 [ 50.782034][ C3] ? lockdep_hardirqs_on+0x7d/0x110 [ 50.783560][ C3] ? ieee80211_clean_skb+0x1a7/0x740 [ 50.785115][ C3] ieee80211_rx_list+0xf19/0x2160 [ 50.786591][ C3] ? lock_acquire+0x1d1/0x380 [ 50.787947][ C3] ? ieee80211_rx_napi+0x9a/0x400 [ 50.789392][ C3] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 50.790940][ C3] ieee80211_rx_napi+0xdc/0x400 [ 50.792349][ C3] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 50.793913][ C3] ? lockdep_hardirqs_on+0x7d/0x110 [ 50.795433][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 50.797033][ C3] ieee80211_handle_queued_frames+0xc8/0x120 [ 50.798759][ C3] tasklet_action_common+0x2de/0x3d0 [ 50.800281][ C3] handle_softirqs+0x1e6/0x9d0 [ 50.801663][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 50.803190][ C3] ? irqtime_account_delta+0x9a/0x110 [ 50.804776][ C3] ? __ieee80211_tx_skb_tid_band+0x2dc/0x720 [ 50.806470][ C3] do_softirq+0xaf/0xf0 [ 50.807641][ C3] [ 50.808491][ C3] [ 50.809314][ C3] __local_bh_enable_ip+0xff/0x120 [ 50.810770][ C3] ieee80211_tx_skb_tid+0x1c4/0x550 [ 50.812265][ C3] ieee80211_mgmt_tx+0x143e/0x26a0 [ 50.813720][ C3] ? __alloc_skb+0xd0/0x710 [ 50.815050][ C3] ? __pfx_ieee80211_mgmt_tx+0x10/0x10 [ 50.816625][ C3] cfg80211_mlme_mgmt_tx+0x800/0x15b0 [ 50.818166][ C3] nl80211_tx_mgmt+0xa73/0x1010 [ 50.819574][ C3] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 50.821097][ C3] ? nl80211_pre_doit+0x19a/0xae0 [ 50.822551][ C3] genl_family_rcv_msg_doit+0x214/0x300 [ 50.824171][ C3] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 50.825917][ C3] ? bpf_lsm_capable+0x9/0x10 [ 50.827311][ C3] ? security_capable+0x80/0x260 [ 50.828741][ C3] ? ns_capable+0xd2/0xf0 [ 50.829986][ C3] genl_rcv_msg+0x560/0x800 [ 50.831327][ C3] ? __pfx_genl_rcv_msg+0x10/0x10 [ 50.832768][ C3] ? __lock_acquire+0x5c0/0x1f40 [ 50.834236][ C3] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 50.835780][ C3] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 50.837286][ C3] ? __pfx_nl80211_post_doit+0x10/0x10 [ 50.838846][ C3] netlink_rcv_skb+0x159/0x420 [ 50.840217][ C3] ? __pfx_genl_rcv_msg+0x10/0x10 [ 50.841658][ C3] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 50.843200][ C3] ? netlink_deliver_tap+0x1ae/0xcc0 [ 50.844757][ C3] genl_rcv+0x28/0x40 [ 50.845914][ C3] netlink_unicast+0x585/0x850 [ 50.847296][ C3] ? __pfx_netlink_unicast+0x10/0x10 [ 50.848799][ C3] netlink_sendmsg+0x8b0/0xda0 [ 50.850187][ C3] ? __pfx_netlink_sendmsg+0x10/0x10 [ 50.851706][ C3] ? selinux_socket_sendmsg+0x198/0x2f0 [ 50.853289][ C3] ____sys_sendmsg+0xa4d/0xbe0 [ 50.854714][ C3] ? __pfx_netlink_sendmsg+0x10/0x10 [ 50.856220][ C3] ? __pfx_____sys_sendmsg+0x10/0x10 [ 50.857739][ C3] ___sys_sendmsg+0x190/0x1e0 [ 50.859093][ C3] ? __pfx____sys_sendmsg+0x10/0x10 [ 50.860580][ C3] ? futex_wait+0x11e/0x370 [ 50.861889][ C3] ? find_held_lock+0x2b/0x80 [ 50.863261][ C3] __sys_sendmsg+0x160/0x210 [ 50.864629][ C3] ? __pfx___sys_sendmsg+0x10/0x10 [ 50.866071][ C3] do_syscall_64+0x123/0x790 [ 50.867353][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.868950][ C3] RIP: 0033:0x7f486c99e159 [ 50.870191][ C3] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.875479][ C3] RSP: 002b:00007f486abf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 50.877858][ C3] RAX: ffffffffffffffda RBX: 00007f486cc25fa0 RCX: 00007f486c99e159 [ 50.880114][ C3] RDX: 0000000000008800 RSI: 0000200000003740 RDI: 0000000000000003 [ 50.882359][ C3] RBP: 00007f486ca3506b R08: 0000000000000000 R09: 0000000000000000 [ 50.884639][ C3] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 50.886877][ C3] R13: 00007f486cc26038 R14: 00007f486cc25fa0 R15: 00007fffb89935f8 [ 50.889121][ C3] [ 50.890568][ C3] Kernel Offset: disabled [ 50.891812][ C3] Rebooting in 86400 seconds..