last executing test programs: 3.239776155s ago: executing program 0 (id=20): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='1\n', 0x2) 2.28107061s ago: executing program 2 (id=28): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/cfg80211/parameters/bss_entries_limit\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='1\n', 0x2) close(r0) syz_80211_join_ibss(&(0x7f0000000300)='wlan0\x00', &(0x7f0000000340)=@default_ibss_ssid, 0x6, 0x1) syz_80211_inject_frame(&(0x7f0000000400), &(0x7f0000000440)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000800)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f0000000500), &(0x7f0000000540)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_b, @from_mac=@device_b}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000900)={0x0, 0x2faf080}, 0x0) 1.640563898s ago: executing program 2 (id=30): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000001c0)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x68, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x2}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x68}}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) 1.499726765s ago: executing program 0 (id=31): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/event_source/devices/uncore\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/event_source/devices/uncore_pmu\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/event_source/devices/amd_uncore\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/event_source/devices/intel_uncore\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/event_source/devices/i915\x00', 0x0, 0x0) 1.218839884s ago: executing program 0 (id=34): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='debugfs\x00', &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='1\n', 0x2) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="02c90012000e00050014010a0023004000000500050a00"], 0x17) nanosleep(&(0x7f0000000300)={0x0, 0x11e1a300}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x11e1a300}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x11e1a300}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x11e1a300}, 0x0) 1.160561982s ago: executing program 1 (id=36): syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x1, 0xfa, 0x41b}}}, 0x7) r0 = socket(0x1f, 0x5, 0x8) bind(r0, &(0x7f0000000200), 0x31) listen(r0, 0x1) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) write(0xca, &(0x7f0000000300)="043e100e0001000101aaaaaaaaaa1101100000", 0x13) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) write(0xca, &(0x7f0000000340)="043e080f01000000000000", 0xb) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) close(r0) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) 1.100353685s ago: executing program 2 (id=38): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000010000100000000000000000002000a0020000000000a0100000000000000000002000a000900010073797a300000000060000000120a0100000000000000000002000a000900010073797a30000000000900020073797a30000000000800030000000009280004800500020006000000060003001f9000000800040088130000050005000100000014000000ff0a0100000000000000000002000a001400000011000100000000000000000002000a00"], 0xbc}}, 0x0) 1.039727535s ago: executing program 2 (id=40): syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000100)=ANY=[@ANYBLOB="d00000000802110000000802110000015050505050500000030000000000"], 0x1e) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 430.716804ms ago: executing program 2 (id=44): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x68}}, 0x0) 370.813875ms ago: executing program 1 (id=46): add_key(&(0x7f0000000600)='rxrpc\x00', &(0x7f0000000640), &(0x7f0000000680), 0x20, 0xfffffffffffffffd) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4321, @loopback}, 0x10) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000640)='rxkad\x00', 0x6) bind$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) connect$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4321, @loopback}}, 0x24) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000010010000010000000100000000000000"], 0x18}, 0x0) recvfrom(r0, &(0x7f0000000300)=""/256, 0x100, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(r3, &(0x7f0000000500)="000000000000000000000001060000020000000100000002000000010000000000000000", 0x24) read(r2, &(0x7f0000000308), 0x24) sendto$inet(r0, &(0x7f0000000300), 0x2c, 0x0, &(0x7f0000000700)={0x2, 0x1234, @loopback}, 0x10) 370.622604ms ago: executing program 2 (id=47): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/pm_test\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='devices\n', 0x8) close(r0) syz_usb_connect(0x3, 0x40, &(0x7f0000000200)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402000200"], 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/power/state\x00', 0x1, 0x0) write(r1, &(0x7f00000003c0)='freeze\n', 0x7) 309.992946ms ago: executing program 1 (id=50): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x188, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0xa8, 0xf0, 0x0, {}, [@common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ip={@local, @local, 0x0, 0x0, 'veth0_to_team\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0x0}}}}, 0x280) 309.84561ms ago: executing program 1 (id=51): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x70, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x12c}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x20}]}]}, 0x70}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)={0x84, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}]}, 0x84}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000700)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r2, &(0x7f0000000800)='Call-ID: test@127.0.0.1\r\n\r\n', 0x1a, 0x0, &(0x7f0000000900)={0x2, 0x4e21, @loopback}, 0x10) 271.272665ms ago: executing program 1 (id=53): r0 = socket(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_vlan\x00'}) 190.838319ms ago: executing program 3 (id=54): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/sys/net/netfilter/nf_log_all_netns\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='1\n', 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd8}}, 0x0) 190.641858ms ago: executing program 1 (id=55): mkdir(&(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) mkdir(&(0x7f0000000080)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000120)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000130)='-2 -3 +4\n\x00', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='tcp 2049\n\x00', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='1\n\x00', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r3, &(0x7f0000000280)='nfsd 127.0.0.1 2147483647 localhost\n\x00', 0x24) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r4, &(0x7f0000000300)='localhost / 2147483647 8193 0 0 0\n\x00', 0x22) close(r4) mkdir(&(0x7f0000000340)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000380)='127.0.0.1:/\x00', &(0x7f0000000340)='./mnt\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='addr=127.0.0.1,port=2049,proto=tcp,vers=4.0,clientaddr=127.0.0.1']) 190.143021ms ago: executing program 0 (id=56): syz_emit_ethernet(0x34, &(0x7f0000000040)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x12, 0x0, @opaque='\x00'/10}}}}}, 0x0) 187.752952ms ago: executing program 0 (id=57): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x6}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x30, 0x3f, 0x107, 0x70bd2b, 0x0, {0x1}, [@nested={0x4, 0x2fc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x5, 0x23, 0x0, 0x0, @str='\x00'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002100)={0x3c, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="0f000000", @typed={0x12, 0x1, 0x0, 0x0, @binary="00112233445566778899aabb86dd"}, @nested={0x4, 0x2}, @nested={0xc, 0x3, 0x0, 0x1, [@nested={0x8, 0x11, 0x0, 0x1, [@nested={0x4, 0x1c}]}]}]}, 0x3c}}, 0x4000000) 139.890749ms ago: executing program 3 (id=58): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/pci/drivers/vfio-pci\x00', 0x0, 0x0) 135.485034ms ago: executing program 0 (id=59): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, 0x0) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="040e0401030c00"], 0x7) 90.565243ms ago: executing program 3 (id=60): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/mapper/control\x00', 0x2, 0x0) 90.409105ms ago: executing program 3 (id=61): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040), &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1 1 1\n', 0x6) write(r0, &(0x7f0000000180)='2 1 1\n', 0x6) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/net/eth0/queues/tx-0/byte_queue_limits/stall_thrs\x00', 0x0, 0x0) read(r1, &(0x7f0000000300)=""/64, 0x40) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/net/eth1/queues/tx-0/byte_queue_limits/stall_thrs\x00', 0x0, 0x0) read(r2, &(0x7f0000000500)=""/64, 0x40) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/class/net/eth2/queues/tx-0/byte_queue_limits/stall_thrs\x00', 0x0, 0x0) read(r3, &(0x7f0000000700)=""/64, 0x40) close(r3) 366.749µs ago: executing program 3 (id=62): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000000)='bridge0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='none\x00', &(0x7f0000000100)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/net/bridge0/bridge/multicast_router\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='1\n\x00', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/devices/virtual/net/bridge0/bridge/multicast_router\x00', 0x2, 0x0) write(r2, &(0x7f0000000380)='1\n\x00', 0x2) close(r2) 0s ago: executing program 3 (id=63): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) nanosleep(&(0x7f0000000540)={0x0, 0x2faf080}, &(0x7f0000000580)) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0xffffffc4]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}]}]}, 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f0000000680)=@device_b, &(0x7f00000006c0)=@mgmt_frame=@beacon={{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000700)={0x0, 0x1000000}, &(0x7f0000000740)) syz_80211_inject_frame(&(0x7f0000000780)=@device_b, &(0x7f00000007c0)=@mgmt_frame=@beacon={{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000800)={0x0, 0x1000000}, &(0x7f0000000840)) syz_80211_inject_frame(&(0x7f0000000880)=@device_b, &(0x7f00000008c0)=@mgmt_frame=@beacon={{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000900)={0x0, 0x1000000}, &(0x7f0000000940)) syz_80211_inject_frame(&(0x7f0000000980)=@device_b, &(0x7f00000009c0)=@mgmt_frame=@beacon={{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000a00)={0x0, 0x1000000}, &(0x7f0000000a40)) syz_80211_inject_frame(&(0x7f0000000a80)=@device_b, &(0x7f0000000ac0)=@mgmt_frame=@beacon={{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000b00)={0x0, 0x1000000}, &(0x7f0000000b40)) syz_80211_inject_frame(&(0x7f0000000b80)=@device_b, &(0x7f0000000bc0)=@mgmt_frame=@beacon={{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000c00)={0x0, 0xbebc200}, &(0x7f0000000c40)) kernel console output (not intermixed with test programs): [ 38.098902][ T43] audit: type=1400 audit(1790054113.188:137): avc: denied { siginh } for pid=5704 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:3813' (ED25519) to the list of known hosts. [ 39.083375][ T43] audit: type=1400 audit(1790054114.168:138): avc: denied { name_bind } for pid=5711 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 39.111062][ T43] audit: type=1400 audit(1790054114.198:139): avc: denied { execute } for pid=5712 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 39.113394][ T43] audit: type=1400 audit(1790054114.198:140): avc: denied { execute_no_trans } for pid=5712 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 41.214688][ T43] audit: type=1400 audit(1790054116.298:141): avc: denied { mounton } for pid=5712 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 41.224061][ T43] audit: type=1400 audit(1790054116.308:142): avc: denied { mount } for pid=5712 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 41.229256][ T5712] cgroup: Unknown subsys name 'net' [ 41.337855][ T5712] cgroup: Unknown subsys name 'cpuset' [ 41.339911][ T5712] cgroup: Unknown subsys name 'rlimit' [ 41.544774][ T5717] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 42.248891][ T5712] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.227718][ T43] kauditd_printk_skb: 15 callbacks suppressed [ 46.227735][ T43] audit: type=1400 audit(1790054121.318:158): avc: denied { execmem } for pid=5719 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 46.515264][ T43] audit: type=1400 audit(1790054121.608:159): avc: denied { create } for pid=5723 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.515581][ T43] audit: type=1400 audit(1790054121.608:160): avc: denied { read write } for pid=5723 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.515941][ T43] audit: type=1400 audit(1790054121.608:161): avc: denied { open } for pid=5723 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.524593][ T43] audit: type=1400 audit(1790054121.608:162): avc: denied { ioctl } for pid=5723 comm="syz-executor" path="socket:[6670]" dev="sockfs" ino=6670 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.556431][ T5082] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.558841][ T5082] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.561479][ T5734] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.562524][ T5734] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.562862][ T5734] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 46.563033][ T5734] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.563484][ T5734] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 46.563545][ T5734] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.563890][ T5734] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.564750][ T5734] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.565002][ T5734] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.566057][ T5736] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.567124][ T5737] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.567468][ T5737] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.568351][ T5734] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 46.569245][ T5734] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.570217][ T5737] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.570690][ T5737] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 46.570892][ T66] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 46.573117][ T43] audit: type=1400 audit(1790054121.658:163): avc: denied { read } for pid=5723 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.573141][ T43] audit: type=1400 audit(1790054121.658:164): avc: denied { open } for pid=5723 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.574197][ T5739] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 46.574992][ T43] audit: type=1400 audit(1790054121.658:165): avc: denied { mounton } for pid=5723 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 46.584490][ T43] audit: type=1400 audit(1790054121.668:166): avc: denied { module_request } for pid=5723 comm="syz-executor" kmod="netdev-nr2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 46.620542][ T43] audit: type=1400 audit(1790054121.708:167): avc: denied { sys_module } for pid=5724 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 47.272074][ T5723] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.272158][ T5723] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.272255][ T5723] bridge_slave_0: entered allmulticast mode [ 47.273665][ T5723] bridge_slave_0: entered promiscuous mode [ 47.277775][ T5723] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.277884][ T5723] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.277982][ T5723] bridge_slave_1: entered allmulticast mode [ 47.279436][ T5723] bridge_slave_1: entered promiscuous mode [ 47.363300][ T5723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.366151][ T5723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.468376][ T5724] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.468467][ T5724] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.468626][ T5724] bridge_slave_0: entered allmulticast mode [ 47.469406][ T5724] bridge_slave_0: entered promiscuous mode [ 47.471184][ T5724] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.471224][ T5724] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.471300][ T5724] bridge_slave_1: entered allmulticast mode [ 47.472047][ T5724] bridge_slave_1: entered promiscuous mode [ 47.481475][ T5723] team0: Port device team_slave_0 added [ 47.510556][ T5723] team0: Port device team_slave_1 added [ 47.523684][ T5724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.561753][ T5724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.562533][ T5723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.562542][ T5723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.562554][ T5723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.568970][ T5732] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.569045][ T5732] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.569105][ T5732] bridge_slave_0: entered allmulticast mode [ 47.569882][ T5732] bridge_slave_0: entered promiscuous mode [ 47.577233][ T5723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.577242][ T5723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.577255][ T5723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.583463][ T5729] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.583506][ T5729] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.583566][ T5729] bridge_slave_0: entered allmulticast mode [ 47.584313][ T5729] bridge_slave_0: entered promiscuous mode [ 47.585728][ T5732] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.585796][ T5732] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.585951][ T5732] bridge_slave_1: entered allmulticast mode [ 47.586843][ T5732] bridge_slave_1: entered promiscuous mode [ 47.598766][ T5724] team0: Port device team_slave_0 added [ 47.599131][ T5729] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.599242][ T5729] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.599331][ T5729] bridge_slave_1: entered allmulticast mode [ 47.600556][ T5729] bridge_slave_1: entered promiscuous mode [ 47.613779][ T5724] team0: Port device team_slave_1 added [ 47.616095][ T5732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.637879][ T5732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.666556][ T5729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.667144][ T5724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.667156][ T5724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.667179][ T5724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.670310][ T5729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.678396][ T5732] team0: Port device team_slave_0 added [ 47.682569][ T5723] hsr_slave_0: entered promiscuous mode [ 47.683135][ T5723] hsr_slave_1: entered promiscuous mode [ 47.692000][ T5724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.692011][ T5724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.692028][ T5724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.693687][ T5732] team0: Port device team_slave_1 added [ 47.724526][ T5729] team0: Port device team_slave_0 added [ 47.750843][ T5729] team0: Port device team_slave_1 added [ 47.751185][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.751194][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.751206][ T5732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.752912][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.752920][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.752932][ T5732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.809602][ T5729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.809619][ T5729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.809640][ T5729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.813059][ T5724] hsr_slave_0: entered promiscuous mode [ 47.814108][ T5724] hsr_slave_1: entered promiscuous mode [ 47.814501][ T5724] debugfs: 'hsr0' already exists in 'hsr' [ 47.814552][ T5724] Cannot create hsr debugfs directory [ 47.829629][ T5729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.829639][ T5729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.829652][ T5729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.855686][ T5732] hsr_slave_0: entered promiscuous mode [ 47.856125][ T5732] hsr_slave_1: entered promiscuous mode [ 47.856452][ T5732] debugfs: 'hsr0' already exists in 'hsr' [ 47.856462][ T5732] Cannot create hsr debugfs directory [ 47.980334][ T5729] hsr_slave_0: entered promiscuous mode [ 47.981073][ T5729] hsr_slave_1: entered promiscuous mode [ 47.981620][ T5729] debugfs: 'hsr0' already exists in 'hsr' [ 47.981636][ T5729] Cannot create hsr debugfs directory [ 48.253087][ T5723] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.258848][ T5723] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.259931][ T5723] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.264588][ T5723] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.265665][ T5723] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.270188][ T5723] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.276811][ T5723] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.279810][ T5723] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.320965][ T5724] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.327322][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.330844][ T5724] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.333936][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.334599][ T5724] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.338431][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.339181][ T5724] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.343655][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.419105][ T5732] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.423363][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.435322][ T5732] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.439844][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.444330][ T5732] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.448369][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.448953][ T5732] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.454278][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.527518][ T5729] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.531472][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.533690][ T5729] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.537241][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.537926][ T5729] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.542125][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.552117][ T5729] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.557257][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.565207][ T5723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.610668][ T5724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.612839][ T5723] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.624531][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.624640][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.629000][ T5082] Bluetooth: hci1: command tx timeout [ 48.629093][ T5082] Bluetooth: hci2: command tx timeout [ 48.629135][ T5082] Bluetooth: hci3: command tx timeout [ 48.629173][ T5082] Bluetooth: hci0: command tx timeout [ 48.640212][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.640283][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.668900][ T5724] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.682589][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.682641][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.683722][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.683767][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.717689][ T5732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.729971][ T5729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.758630][ T5732] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.775833][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.776183][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.779051][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.779133][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.807263][ T5729] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.812852][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.812897][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.829940][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.830023][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.888960][ T5729] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.152903][ T5723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.209219][ T5723] veth0_vlan: entered promiscuous mode [ 49.212851][ T5724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.231799][ T5732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.233151][ T5723] veth1_vlan: entered promiscuous mode [ 49.282804][ T5729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.304843][ T5732] veth0_vlan: entered promiscuous mode [ 49.319030][ T5724] veth0_vlan: entered promiscuous mode [ 49.322210][ T5732] veth1_vlan: entered promiscuous mode [ 49.331823][ T5723] veth0_macvtap: entered promiscuous mode [ 49.343661][ T5723] veth1_macvtap: entered promiscuous mode [ 49.352552][ T5724] veth1_vlan: entered promiscuous mode [ 49.378821][ T5723] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.384780][ T5729] veth0_vlan: entered promiscuous mode [ 49.397019][ T5723] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.401297][ T5729] veth1_vlan: entered promiscuous mode [ 49.403660][ T5732] veth0_macvtap: entered promiscuous mode [ 49.424196][ T5732] veth1_macvtap: entered promiscuous mode [ 49.427455][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.427587][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.427607][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.427625][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.470476][ T5724] veth0_macvtap: entered promiscuous mode [ 49.473134][ T5724] veth1_macvtap: entered promiscuous mode [ 49.492595][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.492609][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.492786][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.506272][ T5729] veth0_macvtap: entered promiscuous mode [ 49.520600][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.530511][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.530529][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.533145][ T5729] veth1_macvtap: entered promiscuous mode [ 49.537491][ T5724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.561495][ T5724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.593545][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.604206][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.618574][ T5723] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.694429][ T222] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.694443][ T222] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.742497][ T222] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.742517][ T222] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.761725][ T222] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.761745][ T222] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.798124][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.798145][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.813052][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.813069][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.815432][ T5801] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.815747][ T5801] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.815975][ T5801] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.878305][ T5801] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.894258][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.894277][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.906276][ T5801] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.909981][ T5801] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.910170][ T5801] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.910401][ T5801] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.910631][ T5801] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.910884][ T5801] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.911384][ T5801] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.921135][ T5875] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.921961][ T5875] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.942518][ T5877] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.943187][ T5877] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.978670][ T5773] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.021764][ T5882] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.029985][ T5882] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 50.110120][ T5725] Bluetooth: Frame is too long (len 25, expected len 23) [ 50.110721][ T5725] Bluetooth: Frame is too long (len 27, expected len 25) [ 50.116435][ T5887] bridge_slave_1: left allmulticast mode [ 50.116458][ T5887] bridge_slave_1: left promiscuous mode [ 50.116908][ T5887] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.122157][ T5887] bridge_slave_0: left allmulticast mode [ 50.122171][ T5887] bridge_slave_0: left promiscuous mode [ 50.122267][ T5887] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.204659][ T5889] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 50.259795][ T5890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 50.313094][ T5889] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 50.365225][ T5890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 50.705267][ T5082] Bluetooth: hci3: command tx timeout [ 50.705300][ T5082] Bluetooth: hci2: command tx timeout [ 50.705318][ T5082] Bluetooth: hci1: command tx timeout [ 50.705450][ T5725] Bluetooth: hci0: command tx timeout [ 51.405029][ T43] kauditd_printk_skb: 31 callbacks suppressed [ 51.405118][ T43] audit: type=1400 audit(1790054126.488:199): avc: denied { create } for pid=5901 comm="syz.3.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 51.406831][ T43] audit: type=1400 audit(1790054126.498:200): avc: denied { write } for pid=5901 comm="syz.3.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 51.450103][ T43] audit: type=1400 audit(1790054126.538:201): avc: denied { name_bind } for pid=5901 comm="syz.3.13" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 51.451506][ T43] audit: type=1400 audit(1790054126.538:202): avc: denied { node_bind } for pid=5901 comm="syz.3.13" saddr=127.0.0.1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 51.507238][ T43] audit: type=1400 audit(1790054126.598:203): avc: denied { mount } for pid=5908 comm="syz.3.16" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 51.508050][ T43] audit: type=1400 audit(1790054126.598:204): avc: denied { search } for pid=5908 comm="syz.3.16" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 51.508795][ T43] audit: type=1400 audit(1790054126.598:205): avc: denied { write } for pid=5908 comm="syz.3.16" name="versions" dev="nfsd" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 51.508830][ T43] audit: type=1400 audit(1790054126.598:206): avc: denied { open } for pid=5908 comm="syz.3.16" path="/2/nfsd_mnt/versions" dev="nfsd" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 51.509948][ T43] audit: type=1400 audit(1790054126.598:207): avc: denied { search } for pid=5908 comm="syz.3.16" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 51.518067][ T43] audit: type=1400 audit(1790054126.608:208): avc: denied { read } for pid=5909 comm="syz.0.14" name="portlist" dev="nfsd" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 51.761198][ T5926] netlink: 16 bytes leftover after parsing attributes in process `syz.1.21'. [ 52.181743][ T5938] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.259002][ T5938] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.322646][ T5938] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.388870][ T5938] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.549171][ T5945] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 52.600517][ T5945] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 52.695977][ T5910] NFSD: Unable to initialize client recovery tracking! (-110) [ 52.695991][ T5910] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 52.695996][ T5910] NFSD: starting 90-second grace period (net f0000597) [ 52.785913][ T5737] Bluetooth: hci0: command tx timeout [ 52.785944][ T5737] Bluetooth: hci1: command tx timeout [ 52.785962][ T5737] Bluetooth: hci2: command tx timeout [ 52.945157][ T5725] Bluetooth: hci3: command tx timeout [ 53.128438][ T5922] NFSD: Failed to start, no listeners configured. [ 53.318090][ T5948] NFSD: Failed to start, no listeners configured. [ 53.724064][ T5725] Bluetooth: hci1: Unable to find connection for dst 11:aa:aa:aa:aa:aa sid 0x01 [ 53.743705][ T5971] netlink: 4 bytes leftover after parsing attributes in process `syz.2.38'. [ 53.743729][ T5971] netlink: 4 bytes leftover after parsing attributes in process `syz.2.38'. [ 53.786392][ T5975] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 53.792150][ T5977] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 53.863086][ T5982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 54.560907][ T222] IPVS: starting estimator thread 0... [ 54.648483][ T6003] IPVS: using max 41 ests per chain, 98400 per kthread [ 54.697737][ T6015] netlink: 'syz.0.57': attribute type 2 has an invalid length. [ 54.703834][ T6015] : entered promiscuous mode [ 54.705672][ T6015] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 54.715148][ T64] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 54.866834][ T5725] Bluetooth: hci2: command tx timeout [ 54.868374][ T64] usb 7-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 54.870105][ T64] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.886004][ T64] usb 7-1: probing VID:PID(0424:012C) [ 54.888330][ T64] usb 7-1: vub300 testing BULK IN EndPoint(0) 81 [ 54.888351][ T64] usb 7-1: vub300 testing BULK OUT EndPoint(1) 02 [ 54.888372][ T64] usb 7-1: vub300 testing BULK IN EndPoint(2) 83 [ 54.888387][ T64] usb 7-1: vub300 testing BULK OUT EndPoint(3) 04 [ 54.888402][ T64] usb 7-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 54.920830][ T6029] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 54.961409][ T30] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 54.961434][ T30] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 54.972570][ T222] wlan1: authenticated [ 54.972919][ T6029] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 54.976656][ T222] wlan1: associate with 08:02:11:00:00:00 (try 1/3) ** replaying previous printk message ** [ 54.992440][ C2] ------------[ cut here ]------------ [ 54.992530][ C2] !oldest [ 54.992551][ C2] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x19d8/0x2450, CPU#2: swapper/2/0 [ 55.001316][ C2] Modules linked in: [ 55.002994][ C2] CPU: 2 UID: 0 PID: 0 Comm: swapper/2 Not tainted syzkaller #0 PREEMPT(full) [ 55.006277][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 55.009852][ C2] RIP: 0010:__cfg80211_bss_update+0x19d8/0x2450 [ 55.012134][ C2] Code: 00 31 ff 41 89 c5 89 c6 e8 45 de ec f6 45 85 ed 0f 85 65 f9 ff ff e8 c7 e3 ec f6 90 0f 0b 90 e9 57 f9 ff ff e8 b9 e3 ec f6 90 <0f> 0b 90 e9 fc fa ff ff e8 ab e3 ec f6 48 8b 44 24 08 48 8d 88 ac [ 55.019647][ C2] RSP: 0018:ffffc90000658348 EFLAGS: 00010246 [ 55.022170][ C2] RAX: 0000000000000000 RBX: ffffffff91457604 RCX: 0000000000000302 [ 55.025505][ C2] RDX: ffff88801f69a580 RSI: ffffffff8b1f3ed7 RDI: ffff88801f69a580 [ 55.028950][ C2] RBP: ffff8880258ce088 R08: 0000000000000005 R09: 0000000000000000 [ 55.029109][ T6029] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 55.036875][ C2] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880258ce000 [ 55.040184][ C2] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff888058c60190 [ 55.043417][ C2] FS: 0000000000000000(0000) GS:ffff8880d5d53000(0000) knlGS:0000000000000000 [ 55.047078][ C2] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 55.049808][ C2] CR2: 00007fcb5dbf5ff8 CR3: 00000000518e7000 CR4: 0000000000352ef0 [ 55.053110][ C2] Call Trace: [ 55.054510][ C2] [ 55.055727][ C2] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 55.057970][ C2] ? cfg80211_inform_single_bss_data+0x557/0x1dc0 [ 55.060597][ C2] cfg80211_inform_single_bss_data+0x770/0x1dc0 [ 55.063162][ C2] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 55.065949][ C2] ? lock_acquire+0x1d1/0x380 [ 55.067937][ C2] ? unwind_next_frame+0x3c8/0x2090 [ 55.070094][ C2] ? common_startup_64+0x13e/0x158 [ 55.072217][ C2] ? cfg80211_inform_bss_data+0x230/0x3c20 [ 55.074603][ C2] cfg80211_inform_bss_data+0x230/0x3c20 [ 55.076925][ C2] ? __lock_acquire+0x5c0/0x1f40 [ 55.079027][ C2] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 55.080967][ T6029] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 55.085195][ T38] wlan1: associate with 08:02:11:00:00:00 (try 2/3) [ 55.088093][ C2] ? lock_acquire+0x1d1/0x380 [ 55.090039][ C2] ? unwind_next_frame+0xbd/0x2090 [ 55.092222][ C2] ? lock_acquire+0x1d1/0x380 [ 55.094202][ C2] ? unwind_next_frame+0xbd/0x2090 [ 55.096315][ C2] ? find_held_lock+0x2b/0x80 [ 55.098266][ C2] ? unwind_next_frame+0x3be/0x2090 [ 55.098950][ T6029] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 55.103048][ C2] ? unwind_next_frame+0x3be/0x2090 [ 55.104694][ C2] ? __lock_acquire+0x5c0/0x1f40 [ 55.106335][ C2] ? common_startup_64+0x13e/0x158 [ 55.107964][ C2] cfg80211_inform_bss_frame_data+0x245/0x7c0 [ 55.109858][ C2] ieee80211_bss_info_update+0x310/0xab0 [ 55.111744][ C2] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 55.113787][ C2] ? do_idle+0x3ae/0x5b0 [ 55.115147][ C2] ? cpu_startup_entry+0x4f/0x60 [ 55.116726][ C2] ? start_secondary+0x21d/0x2d0 [ 55.117142][ T6029] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 55.121611][ C2] ? common_startup_64+0x13e/0x158 [ 55.123234][ C2] ? ieee80211_get_channel_khz+0x14a/0x1e0 [ 55.125053][ C2] ieee80211_scan_rx+0x4e6/0xb60 [ 55.126647][ C2] ? __lock_acquire+0x5c0/0x1f40 [ 55.128219][ C2] __ieee80211_rx_handle_packet+0xbab/0xfc0 [ 55.130106][ C2] ? __pfx___ieee80211_rx_handle_packet+0x10/0x10 [ 55.132188][ C2] ? kcov_remote_start+0x3bf/0x6d0 [ 55.133794][ C2] ? lockdep_hardirqs_on+0x7d/0x110 [ 55.135462][ C2] ? ieee80211_clean_skb+0x1a7/0x740 [ 55.135883][ T6029] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 55.135935][ T6030] PM: suspend entry (s2idle) [ 55.141712][ C2] ieee80211_rx_list+0xf19/0x2160 [ 55.143349][ C2] ? lock_acquire+0x1d1/0x380 [ 55.144862][ C2] ? ieee80211_rx_napi+0x9a/0x400 [ 55.146539][ C2] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 55.148253][ C2] ieee80211_rx_napi+0xdc/0x400 [ 55.149829][ C2] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 55.151547][ C2] ? lockdep_hardirqs_on+0x7d/0x110 [ 55.153179][ C2] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 55.154824][ T6029] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 55.157975][ C2] ieee80211_handle_queued_frames+0xc8/0x120 [ 55.159893][ C2] tasklet_action_common+0x2de/0x3d0 [ 55.162565][ C2] handle_softirqs+0x1e6/0x9d0 [ 55.165040][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 55.167812][ C2] ? _raw_spin_unlock+0x28/0x50 [ 55.169536][ C2] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 55.171364][ C2] __irq_exit_rcu+0x16a/0x210 [ 55.172928][ C2] irq_exit_rcu+0x9/0x30 [ 55.174300][ C2] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 55.176116][ C2] [ 55.177095][ C2] [ 55.178068][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 55.180077][ C2] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 55.180776][ T6029] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 55.184881][ C2] Code: 37 94 02 e9 43 50 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 03 38 1a 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 55.191087][ C2] RSP: 0018:ffffc90000197e00 EFLAGS: 00000202 [ 55.193949][ C2] RAX: 0000000000050737 RBX: ffff88801f69a580 RCX: ffffffff8bd181c5 [ 55.196971][ C2] RDX: 0000000000000001 RSI: ffffffff8e38cf0c RDI: ffffffff8c623580 [ 55.200124][ C2] RBP: ffffed1003ed34b0 R08: 0000000000000001 R09: ffffed100d4c67bd [ 55.203253][ C2] R10: ffff88806a633deb R11: 0000000000000001 R12: 0000000000000000 [ 55.206416][ C2] R13: 0000000000000000 R14: 1ffff92000032fc4 R15: dffffc0000000000 [ 55.209647][ C2] ? ct_kernel_exit+0x125/0x180 [ 55.211690][ C2] default_idle+0x9/0x10 [ 55.213466][ C2] default_idle_call+0x6c/0xb0 [ 55.215402][ C2] do_idle+0x3ae/0x5b0 [ 55.217151][ C2] ? __pfx_do_idle+0x10/0x10 [ 55.219105][ C2] ? rcu_is_watching+0x13/0xc0 [ 55.220907][ C2] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 55.223323][ C2] ? lockdep_hardirqs_on+0x7d/0x110 [ 55.225688][ C2] cpu_startup_entry+0x4f/0x60 [ 55.227619][ C2] start_secondary+0x21d/0x2d0 [ 55.229578][ C2] ? __pfx_start_secondary+0x10/0x10 [ 55.231372][ C2] common_startup_64+0x13e/0x158 [ 55.232986][ C2] [ 55.234035][ C2] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 55.237058][ C2] CPU: 2 UID: 0 PID: 0 Comm: swapper/2 Not tainted syzkaller #0 PREEMPT(full) [ 55.240721][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 55.244884][ C2] Call Trace: [ 55.246271][ C2] [ 55.247446][ C2] dump_stack_lvl+0x100/0x190 [ 55.249661][ C2] vpanic+0x553/0x970 [ 55.251399][ C2] ? __pfx_vpanic+0x10/0x10 [ 55.253489][ C2] panic+0xd1/0xe0 [ 55.255105][ C2] ? __pfx_panic+0x10/0x10 [ 55.257280][ C2] check_panic_on_warn.cold+0x19/0x34 [ 55.259999][ C2] ? __cfg80211_bss_update+0x19d8/0x2450 [ 55.262539][ C2] __warn.cold+0x191/0x318 [ 55.264452][ C2] __report_bug+0x30f/0x440 [ 55.266397][ C2] ? __cfg80211_bss_update+0x19d8/0x2450 [ 55.268680][ C2] ? __pfx___report_bug+0x10/0x10 [ 55.270683][ C2] ? __cfg80211_bss_update+0x19d8/0x2450 [ 55.273019][ C2] report_bug+0xb3/0x220 [ 55.274806][ C2] ? __cfg80211_bss_update+0x19d8/0x2450 [ 55.276994][ C2] handle_bug+0x16a/0x2a0 [ 55.278731][ C2] exc_invalid_op+0x17/0x50 [ 55.280540][ C2] asm_exc_invalid_op+0x1a/0x20 [ 55.282537][ C2] RIP: 0010:__cfg80211_bss_update+0x19d8/0x2450 [ 55.285061][ C2] Code: 00 31 ff 41 89 c5 89 c6 e8 45 de ec f6 45 85 ed 0f 85 65 f9 ff ff e8 c7 e3 ec f6 90 0f 0b 90 e9 57 f9 ff ff e8 b9 e3 ec f6 90 <0f> 0b 90 e9 fc fa ff ff e8 ab e3 ec f6 48 8b 44 24 08 48 8d 88 ac [ 55.293173][ C2] RSP: 0018:ffffc90000658348 EFLAGS: 00010246 [ 55.295714][ C2] RAX: 0000000000000000 RBX: ffffffff91457604 RCX: 0000000000000302 [ 55.298993][ C2] RDX: ffff88801f69a580 RSI: ffffffff8b1f3ed7 RDI: ffff88801f69a580 [ 55.302261][ C2] RBP: ffff8880258ce088 R08: 0000000000000005 R09: 0000000000000000 [ 55.305317][ C2] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880258ce000 [ 55.307849][ C2] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff888058c60190 [ 55.310318][ C2] ? __cfg80211_bss_update+0x19d7/0x2450 [ 55.312095][ C2] ? __cfg80211_bss_update+0x19d7/0x2450 [ 55.313852][ C2] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 55.315792][ C2] ? cfg80211_inform_single_bss_data+0x557/0x1dc0 [ 55.318358][ C2] cfg80211_inform_single_bss_data+0x770/0x1dc0 [ 55.320392][ C2] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 55.322511][ C2] ? lock_acquire+0x1d1/0x380 [ 55.324218][ C2] ? unwind_next_frame+0x3c8/0x2090 [ 55.326405][ C2] ? common_startup_64+0x13e/0x158 [ 55.328578][ C2] ? cfg80211_inform_bss_data+0x230/0x3c20 [ 55.331013][ C2] cfg80211_inform_bss_data+0x230/0x3c20 [ 55.333102][ C2] ? __lock_acquire+0x5c0/0x1f40 [ 55.334684][ C2] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 55.336722][ C2] ? lock_acquire+0x1d1/0x380 [ 55.338361][ C2] ? unwind_next_frame+0xbd/0x2090 [ 55.340423][ C2] ? lock_acquire+0x1d1/0x380 [ 55.342322][ C2] ? unwind_next_frame+0xbd/0x2090 [ 55.344468][ C2] ? find_held_lock+0x2b/0x80 [ 55.346414][ C2] ? unwind_next_frame+0x3be/0x2090 [ 55.348414][ C2] ? unwind_next_frame+0x3be/0x2090 [ 55.350478][ C2] ? __lock_acquire+0x5c0/0x1f40 [ 55.352329][ C2] ? common_startup_64+0x13e/0x158 [ 55.354452][ C2] cfg80211_inform_bss_frame_data+0x245/0x7c0 [ 55.357049][ C2] ieee80211_bss_info_update+0x310/0xab0 [ 55.359308][ C2] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 55.361859][ C2] ? do_idle+0x3ae/0x5b0 [ 55.363663][ C2] ? cpu_startup_entry+0x4f/0x60 [ 55.365731][ C2] ? start_secondary+0x21d/0x2d0 [ 55.367852][ C2] ? common_startup_64+0x13e/0x158 [ 55.370041][ C2] ? ieee80211_get_channel_khz+0x14a/0x1e0 [ 55.372489][ C2] ieee80211_scan_rx+0x4e6/0xb60 [ 55.374601][ C2] ? __lock_acquire+0x5c0/0x1f40 [ 55.376731][ C2] __ieee80211_rx_handle_packet+0xbab/0xfc0 [ 55.379378][ C2] ? __pfx___ieee80211_rx_handle_packet+0x10/0x10 [ 55.381966][ C2] ? kcov_remote_start+0x3bf/0x6d0 [ 55.383847][ C2] ? lockdep_hardirqs_on+0x7d/0x110 [ 55.385682][ C2] ? ieee80211_clean_skb+0x1a7/0x740 [ 55.387505][ C2] ieee80211_rx_list+0xf19/0x2160 [ 55.389229][ C2] ? lock_acquire+0x1d1/0x380 [ 55.390853][ C2] ? ieee80211_rx_napi+0x9a/0x400 [ 55.393091][ C2] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 55.395471][ C2] ieee80211_rx_napi+0xdc/0x400 [ 55.397553][ C2] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 55.399848][ C2] ? lockdep_hardirqs_on+0x7d/0x110 [ 55.402056][ C2] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 55.404481][ C2] ieee80211_handle_queued_frames+0xc8/0x120 [ 55.407015][ C2] tasklet_action_common+0x2de/0x3d0 [ 55.409154][ C2] handle_softirqs+0x1e6/0x9d0 [ 55.411120][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 55.413248][ C2] ? _raw_spin_unlock+0x28/0x50 [ 55.415170][ C2] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 55.417711][ C2] __irq_exit_rcu+0x16a/0x210 [ 55.419717][ C2] irq_exit_rcu+0x9/0x30 [ 55.421465][ C2] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 55.423949][ C2] [ 55.425224][ C2] [ 55.426536][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 55.429065][ C2] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 55.431265][ C2] Code: 37 94 02 e9 43 50 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 03 38 1a 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 55.437979][ C2] RSP: 0018:ffffc90000197e00 EFLAGS: 00000202 [ 55.439903][ C2] RAX: 0000000000050737 RBX: ffff88801f69a580 RCX: ffffffff8bd181c5 [ 55.442471][ C2] RDX: 0000000000000001 RSI: ffffffff8e38cf0c RDI: ffffffff8c623580 [ 55.445197][ C2] RBP: ffffed1003ed34b0 R08: 0000000000000001 R09: ffffed100d4c67bd [ 55.447826][ C2] R10: ffff88806a633deb R11: 0000000000000001 R12: 0000000000000000 [ 55.450203][ C2] R13: 0000000000000000 R14: 1ffff92000032fc4 R15: dffffc0000000000 [ 55.452564][ C2] ? ct_kernel_exit+0x125/0x180 [ 55.454062][ C2] default_idle+0x9/0x10 [ 55.455399][ C2] default_idle_call+0x6c/0xb0 [ 55.456903][ C2] do_idle+0x3ae/0x5b0 [ 55.458181][ C2] ? __pfx_do_idle+0x10/0x10 [ 55.459644][ C2] ? rcu_is_watching+0x13/0xc0 [ 55.461144][ C2] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 55.462965][ C2] ? lockdep_hardirqs_on+0x7d/0x110 [ 55.464589][ C2] cpu_startup_entry+0x4f/0x60 [ 55.466087][ C2] start_secondary+0x21d/0x2d0 [ 55.467600][ C2] ? __pfx_start_secondary+0x10/0x10 [ 55.469242][ C2] common_startup_64+0x13e/0x158 [ 55.470802][ C2] [ 55.472447][ C2] Kernel Offset: disabled [ 55.473799][ C2] Rebooting in 86400 seconds..