no interfaces have a carrier
[ 48.708437][ T5433] 8021q: adding VLAN 0 to HW filter on device bond0
[ 48.718537][ T5433] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting crond: OK
Starting sshd: OK
syzkaller
syzkaller login: [ 86.803857][ T970] cfg80211: failed to load regulatory.db
Warning: Permanently added '10.128.0.18' (ED25519) to the list of known hosts.
2026/01/06 12:26:24 parsed 1 programs
[ 114.028652][ T5789] cgroup: Unknown subsys name 'net'
[ 114.210389][ T5789] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 115.757458][ T5789] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 117.927538][ T5821] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 117.936260][ T5821] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 117.944048][ T5821] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 117.952563][ T5821] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 117.960230][ T5821] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 117.968101][ T5821] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 119.620938][ T5842] chnl_net:caif_netlink_parms(): no params data found
[ 119.688807][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state
[ 119.696063][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[ 119.705850][ T5842] bridge_slave_0: entered allmulticast mode
[ 119.713043][ T5842] bridge_slave_0: entered promiscuous mode
[ 119.721411][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state
[ 119.728910][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[ 119.736216][ T5842] bridge_slave_1: entered allmulticast mode
[ 119.743254][ T5842] bridge_slave_1: entered promiscuous mode
[ 119.777138][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 119.788413][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 119.827037][ T5842] team0: Port device team_slave_0 added
[ 119.836587][ T5842] team0: Port device team_slave_1 added
[ 119.870071][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 119.877531][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 119.903466][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 119.916361][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 119.923523][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 119.949591][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 119.989219][ T5842] hsr_slave_0: entered promiscuous mode
[ 119.998784][ T5842] hsr_slave_1: entered promiscuous mode
[ 120.148063][ T5842] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 120.159245][ T5842] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 120.169580][ T5842] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 120.179138][ T5842] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 120.216891][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state
[ 120.224147][ T5842] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 120.231851][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state
[ 120.239032][ T5842] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 120.309268][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0
[ 120.327443][ T3437] bridge0: port 1(bridge_slave_0) entered disabled state
[ 120.337471][ T3437] bridge0: port 2(bridge_slave_1) entered disabled state
[ 120.356583][ T5842] 8021q: adding VLAN 0 to HW filter on device team0
[ 120.376442][ T38] bridge0: port 1(bridge_slave_0) entered blocking state
[ 120.383671][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 120.397621][ T3437] bridge0: port 2(bridge_slave_1) entered blocking state
[ 120.404761][ T3437] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 120.458313][ T5842] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 120.616717][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 120.660042][ T5842] veth0_vlan: entered promiscuous mode
[ 120.676230][ T5842] veth1_vlan: entered promiscuous mode
[ 120.707860][ T5842] veth0_macvtap: entered promiscuous mode
[ 120.717612][ T5842] veth1_macvtap: entered promiscuous mode
[ 120.740370][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 120.757989][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 120.770088][ T5842] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 120.780007][ T5842] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 120.788916][ T5842] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 120.798226][ T5842] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 121.255493][ T3484] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 121.947087][ T3500] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 121.958604][ T3500] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 121.986344][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 121.994537][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2026/01/06 12:26:35 executed programs: 0
[ 122.470920][ T5083] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 122.479516][ T5083] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 122.487905][ T5083] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 122.496443][ T5083] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 122.505087][ T5083] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 122.513291][ T5083] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 122.661009][ T5893] chnl_net:caif_netlink_parms(): no params data found
[ 122.726367][ T5893] bridge0: port 1(bridge_slave_0) entered blocking state
[ 122.734054][ T5893] bridge0: port 1(bridge_slave_0) entered disabled state
[ 122.741185][ T5893] bridge_slave_0: entered allmulticast mode
[ 122.748478][ T5893] bridge_slave_0: entered promiscuous mode
[ 122.756318][ T5893] bridge0: port 2(bridge_slave_1) entered blocking state
[ 122.763674][ T5893] bridge0: port 2(bridge_slave_1) entered disabled state
[ 122.770793][ T5893] bridge_slave_1: entered allmulticast mode
[ 122.778323][ T5893] bridge_slave_1: entered promiscuous mode
[ 122.808900][ T5893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 122.820867][ T5893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 122.853803][ T5893] team0: Port device team_slave_0 added
[ 122.861728][ T5893] team0: Port device team_slave_1 added
[ 122.889673][ T5893] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 122.897658][ T5893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 122.923846][ T5893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 122.936020][ T5893] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 122.943022][ T5893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 122.969212][ T5893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 123.009918][ T5893] hsr_slave_0: entered promiscuous mode
[ 123.017150][ T5893] hsr_slave_1: entered promiscuous mode
[ 123.024128][ T5893] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 123.031904][ T5893] Cannot create hsr debugfs directory
[ 123.393706][ T3484] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 124.562943][ T5083] Bluetooth: hci0: command tx timeout
[ 125.923963][ T3484] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 125.975175][ T3484] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 126.643207][ T5083] Bluetooth: hci0: command tx timeout
[ 126.927333][ T5893] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 126.938459][ T5893] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 126.952592][ T5893] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 126.977573][ T5893] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 127.011526][ T3484] hsr_slave_0: left promiscuous mode
[ 127.017742][ T3484] hsr_slave_1: left promiscuous mode
[ 127.024202][ T3484] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 127.031599][ T3484] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 127.040068][ T3484] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 127.048388][ T3484] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 127.056538][ T3484] bridge_slave_1: left allmulticast mode
[ 127.062269][ T3484] bridge_slave_1: left promiscuous mode
[ 127.068394][ T3484] bridge0: port 2(bridge_slave_1) entered disabled state
[ 127.078912][ T3484] bridge_slave_0: left allmulticast mode
[ 127.084690][ T3484] bridge_slave_0: left promiscuous mode
[ 127.090354][ T3484] bridge0: port 1(bridge_slave_0) entered disabled state
[ 127.111732][ T3484] veth1_macvtap: left promiscuous mode
[ 127.117887][ T3484] veth0_macvtap: left promiscuous mode
[ 127.124277][ T3484] veth1_vlan: left promiscuous mode
[ 127.129722][ T3484] veth0_vlan: left promiscuous mode
[ 127.464942][ T3484] team0 (unregistering): Port device team_slave_1 removed
[ 127.491315][ T3484] team0 (unregistering): Port device team_slave_0 removed
[ 127.521882][ T3484] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 127.551127][ T3484] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 127.818726][ T3484] bond0 (unregistering): Released all slaves
[ 127.928753][ T5893] 8021q: adding VLAN 0 to HW filter on device bond0
[ 127.959933][ T5893] 8021q: adding VLAN 0 to HW filter on device team0
[ 127.983500][ T3461] bridge0: port 1(bridge_slave_0) entered blocking state
[ 127.990620][ T3461] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 128.000220][ T3461] bridge0: port 2(bridge_slave_1) entered blocking state
[ 128.007352][ T3461] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 128.227250][ T5893] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 128.269552][ T5893] veth0_vlan: entered promiscuous mode
[ 128.281907][ T5893] veth1_vlan: entered promiscuous mode
[ 128.319363][ T5893] veth0_macvtap: entered promiscuous mode
[ 128.331905][ T5893] veth1_macvtap: entered promiscuous mode
[ 128.370706][ T5893] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 128.396840][ T5893] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 128.413679][ T5893] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 128.422942][ T5893] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 128.431838][ T5893] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 128.440767][ T5893] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 128.516097][ T3500] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 128.525495][ T3500] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 128.553971][ T3500] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
2026/01/06 12:26:41 executed programs: 2
[ 128.561829][ T3500] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 128.722155][ T5083] Bluetooth: hci0: command tx timeout
[ 130.803541][ T5083] Bluetooth: hci0: command tx timeout
[ 132.887224][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[ 132.899153][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
2026/01/06 12:26:46 executed programs: 198
2026/01/06 12:26:51 executed programs: 422
[ 142.430288][ T5821] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 142.440185][ T5821] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 142.449441][ T5821] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 142.457829][ T5821] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 142.469315][ T5821] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 142.484479][ T5821] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 142.625181][ T6544] chnl_net:caif_netlink_parms(): no params data found
[ 142.657377][ T3437] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 142.718872][ T3437] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 142.745209][ T6544] bridge0: port 1(bridge_slave_0) entered blocking state
[ 142.752446][ T6544] bridge0: port 1(bridge_slave_0) entered disabled state
[ 142.759564][ T6544] bridge_slave_0: entered allmulticast mode
[ 142.767421][ T6544] bridge_slave_0: entered promiscuous mode
[ 142.783780][ T3437] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 142.797017][ T6544] bridge0: port 2(bridge_slave_1) entered blocking state
[ 142.804312][ T6544] bridge0: port 2(bridge_slave_1) entered disabled state
[ 142.811433][ T6544] bridge_slave_1: entered allmulticast mode
[ 142.820299][ T6544] bridge_slave_1: entered promiscuous mode
[ 142.837412][ T3437] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 142.873518][ T6544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 142.886252][ T6544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 142.921627][ T6544] team0: Port device team_slave_0 added
[ 142.930708][ T6544] team0: Port device team_slave_1 added
[ 142.978686][ T6544] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 142.986376][ T6544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 143.012894][ T6544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 143.039822][ T6544] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 143.051224][ T6544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 143.077635][ T6544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 143.154079][ T6544] hsr_slave_0: entered promiscuous mode
[ 143.160819][ T6544] hsr_slave_1: entered promiscuous mode
[ 144.008362][ T1139] ------------[ cut here ]------------
[ 144.014202][ T1139] WARNING: CPU: 0 PID: 1139 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x10e8/0x28f0
[ 144.025331][ T1139] Modules linked in:
[ 144.029277][ T1139] CPU: 0 PID: 1139 Comm: kworker/u4:5 Not tainted syzkaller #0
[ 144.036960][ T1139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 144.046698][ T3461] ------------[ cut here ]------------
[ 144.047076][ T1139] Workqueue: phy6 ieee80211_csa_finalize_work
[ 144.052638][ T3461] WARNING: CPU: 1 PID: 3461 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x10e8/0x28f0
[ 144.052677][ T3461] Modules linked in:
[ 144.058747][ T1139]
[ 144.058765][ T1139] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0
[ 144.069728][ T3461] CPU: 1 PID: 3461 Comm: kworker/u4:8 Not tainted syzkaller #0
[ 144.069764][ T3461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 144.069776][ T3461] Workqueue: phy5 ieee80211_csa_finalize_work
[ 144.069803][ T3461] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0
[ 144.069828][ T3461] Code: 48 89 df e8 0a bf f0 f7 e9 dc fc ff ff e8 30 51 99 f7 eb 24 e8 29 51 99 f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 18 51 99 f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 0a 51 99 f7 48 8b 7c 24 08 4c 8b 7c
[ 144.073791][ T1139] Code: 48 89 df e8 0a bf f0 f7 e9 dc fc ff ff e8 30 51 99 f7 eb 24 e8 29 51 99 f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 18 51 99 f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 0a 51 99 f7 48 8b 7c 24 08 4c 8b 7c
[ 144.076090][ T3461] RSP: 0018:ffffc9000cde79c0 EFLAGS: 00010293
[ 144.083432][ T1139] RSP: 0018:ffffc90004bcf9c0 EFLAGS: 00010293
[ 144.083453][ T1139] RAX: ffffffff89ec3bae RBX: 0000000000000001 RCX: ffff888023a25a00
[ 144.083466][ T1139] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[ 144.083477][ T1139] RBP: dffffc0000000000 R08: ffff88801d7715af R09: 1ffff11003aee2b5
[ 144.091021][ T3461]
[ 144.091029][ T3461] RAX: ffffffff89ec3bae RBX: 0000000000000001 RCX: ffff88802dc75a00
[ 144.101158][ T1139] R10: dffffc0000000000 R11: ffffed1003aee2b6 R12: 0000000000000001
[ 144.107197][ T3461] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[ 144.115377][ C1] ------------[ cut here ]------------
[ 144.115460][ C1] WARNING: CPU: 1 PID: 3461 at net/mac80211/tx.c:5031 __ieee80211_beacon_get+0x1233/0x1600
[ 144.115499][ C1] Modules linked in:
[ 144.115512][ C1] CPU: 1 PID: 3461 Comm: kworker/u4:8 Not tainted syzkaller #0
[ 144.115529][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 144.115541][ C1] Workqueue: phy5 ieee80211_csa_finalize_work
[ 144.115568][ C1] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600
[ 144.115581][ T1139] R13: ffff88801d7725d9 R14: ffff88802c9eac70 R15: ffff88802c9eace8
[ 144.115595][ C1] Code: 24 4c 89 e7 e8 0e 25 db f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 59 f6 9d f7 0f 0b e9 f6 f7 ff ff e8 4d f6 9d f7 <0f> 0b e9 48 fb ff ff e8 41 f6 9d f7 48 c7 c7 e0 96 23 8e 4c 89 e6
[ 144.115600][ T1139] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[ 144.115613][ C1] RSP: 0018:ffffc900001f0a18 EFLAGS: 00010246
[ 144.115616][ T1139] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 144.115628][ C1]
[ 144.115630][ T1139] CR2: 000055a5d8e58950 CR3: 00000000192a4000 CR4: 00000000003506f0
[ 144.115634][ C1] RAX: ffffffff89e79a73 RBX: ffffffff89e78876 RCX: ffff88802dc75a00
[ 144.115648][ T1139] Call Trace:
[ 144.115650][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000
[ 144.115656][ T1139]
[ 144.115663][ C1] RBP: 0000000000000000 R08: ffff88802dc75a00 R09: 0000000000000003
[ 144.115674][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88801d7723c0
[ 144.115688][ C1] R13: dffffc0000000000 R14: ffff88801d7728b0 R15: ffff88802e5f2824
[ 144.115690][ T1139] ieee80211_link_use_reserved_context+0x383/0x5c0
[ 144.115710][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[ 144.115722][ T1139] ieee80211_csa_finalize+0x59a/0xf00
[ 144.115730][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 144.115767][ C1] CR2: 00007f22c1020e9c CR3: 000000001a7fe000 CR4: 00000000003506e0
[ 144.115767][ T1139] ? mutex_lock_nested+0x20/0x20
[ 144.115786][ C1] Call Trace:
[ 144.115794][ C1]
[ 144.115790][ T1139] ? lockdep_hardirqs_on_prepare+0x400/0x760
[ 144.115806][ C1] ? __ieee80211_beacon_get+0x36/0x1600
[ 144.115815][ T1139] ? ieee80211_csa_finalize_work+0x140/0x140
[ 144.115844][ T1139] ? read_lock_is_recursive+0x20/0x20
[ 144.115845][ C1] ieee80211_beacon_get_tim+0xb8/0x560
[ 144.115876][ T1139] ieee80211_csa_finalize_work+0xf6/0x140
[ 144.115877][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90
[ 144.115905][ T1139] ? process_scheduled_works+0x957/0x15b0
[ 144.115917][ C1] mac80211_hwsim_beacon_tx+0x3c7/0x780
[ 144.115931][ T1139] process_scheduled_works+0xa45/0x15b0
[ 144.115953][ C1] __iterate_interfaces+0x243/0x500
[ 144.115986][ T1139] ? assign_work+0x400/0x400
[ 144.115984][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0
[ 144.116012][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[ 144.116018][ T1139] ? assign_work+0x39e/0x400
[ 144.116046][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0
[ 144.116049][ T1139] worker_thread+0xa55/0xfc0
[ 144.116075][ T1139] ? _raw_spin_unlock_irqrestore+0xae/0x110
[ 144.116074][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[ 144.116101][ T1139] ? _raw_spin_unlock+0x40/0x40
[ 144.116111][ C1] mac80211_hwsim_beacon+0xbb/0x1b0
[ 144.116123][ T1139] ? _raw_spin_unlock_irqrestore+0x86/0x110
[ 144.116140][ C1] __hrtimer_run_queues+0x51e/0xc40
[ 144.116169][ T1139] kthread+0x2fa/0x390
[ 144.116169][ C1] ? hw_scan_work+0xf40/0xf40
[ 144.116188][ T1139] ? pr_cont_work+0x560/0x560
[ 144.116202][ C1] ? hrtimer_interrupt+0x9c0/0x9c0
[ 144.116224][ T1139] ? kthread_blkcg+0xd0/0xd0
[ 144.116234][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0
[ 144.116242][ T1139] ret_from_fork+0x48/0x80
[ 144.116264][ T1139] ? kthread_blkcg+0xd0/0xd0
[ 144.116267][ C1] hrtimer_run_softirq+0x187/0x2b0
[ 144.116283][ T1139] ret_from_fork_asm+0x11/0x20
[ 144.116293][ C1] handle_softirqs+0x280/0x820
[ 144.116316][ C1] ? __irq_exit_rcu+0xc7/0x190
[ 144.116325][ T1139]
[ 144.116335][ T1139] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 144.116340][ C1] ? do_softirq+0x180/0x180
[ 144.116343][ T1139] CPU: 0 PID: 1139 Comm: kworker/u4:5 Not tainted syzkaller #0
[ 144.116359][ T1139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 144.116361][ C1] ? irqtime_account_irq+0xb6/0x1c0
[ 144.116369][ T1139] Workqueue: phy6 ieee80211_csa_finalize_work
[ 144.116392][ T1139] Call Trace:
[ 144.116387][ C1] __irq_exit_rcu+0xc7/0x190
[ 144.116398][ T1139]
[ 144.116404][ C1] ? irq_exit_rcu+0x20/0x20
[ 144.116404][ T1139] dump_stack_lvl+0x16c/0x230
[ 144.116446][ C1] irq_exit_rcu+0x9/0x20
[ 144.116453][ T1139] ? show_regs_print_info+0x20/0x20
[ 144.116462][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0
[ 144.116485][ C1]
[ 144.116490][ C1]
[ 144.116482][ T1139] ? load_image+0x3b0/0x3b0
[ 144.116498][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 144.116521][ C1] RIP: 0010:vprintk_emit+0x44f/0x600
[ 144.116528][ T1139] panic+0x2c0/0x710
[ 144.116543][ C1] Code: 51 01 00 00 e8 52 55 1b 00 45 89 f7 48 85 db 48 8b 5c 24 08 75 07 e8 40 55 1b 00 eb 06 e8 39 55 1b 00 fb 48 c7 c7 40 42 d2 8c <31> f6 ba 01 00 00 00 31 c9 41 b8 01 00 00 00 45 31 c9 53 e8 59 bd
[ 144.116558][ C1] RSP: 0018:ffffc9000cde75a0 EFLAGS: 00000293
[ 144.116558][ T1139] ? bpf_jit_dump+0xd0/0xd0
[ 144.116570][ C1]
[ 144.116574][ C1] RAX: ffffffff816a3b87 RBX: ffffffff816a3a41 RCX: ffff88802dc75a00
[ 144.116588][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8cd24240
[ 144.116591][ T1139] ? ret_from_fork_asm+0x11/0x20
[ 144.116600][ C1] RBP: ffffc9000cde7690 R08: ffffffff90d945c7 R09: 1ffffffff21b28b8
[ 144.116613][ C1] R10: dffffc0000000000 R11: fffffbfff21b28b9 R12: dffffc0000000000
[ 144.116622][ T1139] __warn+0x2e0/0x470
[ 144.116627][ C1] R13: ffffc9000cde7700 R14: 0000000000000041 R15: 0000000000000041
[ 144.116643][ T1139] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0
[ 144.116643][ C1] ? vprintk_emit+0x301/0x600
[ 144.116667][ C1] ? vprintk_emit+0x447/0x600
[ 144.116668][ T1139] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0
[ 144.116692][ T1139] report_bug+0x2be/0x4f0
[ 144.116695][ C1] ? vprintk_emit+0x301/0x600
[ 144.116720][ T1139] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0
[ 144.116728][ C1] ? printk_sprint+0x460/0x460
[ 144.116750][ T1139] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0
[ 144.116755][ C1] ? _printk+0xd0/0x110
[ 144.116772][ T1139] ? ieee80211_vif_use_reserved_switch+0x10ea/0x28f0
[ 144.116778][ C1] ? copy_from_kernel_nofault+0x1d2/0x320
[ 144.116794][ T1139] handle_bug+0xcf/0x120
[ 144.116812][ T1139] exc_invalid_op+0x1a/0x50
[ 144.116813][ C1] _printk+0xd0/0x110
[ 144.116828][ T1139] asm_exc_invalid_op+0x1a/0x20
[ 144.116836][ C1] ? ieee80211_vif_use_reserved_switch+0x10be/0x28f0
[ 144.116847][ T1139] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0
[ 144.116863][ C1] ? load_image+0x3b0/0x3b0
[ 144.116869][ T1139] Code: 48 89 df e8 0a bf f0 f7 e9 dc fc ff ff e8 30 51 99 f7 eb 24 e8 29 51 99 f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 18 51 99 f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 0a 51 99 f7 48 8b 7c 24 08 4c 8b 7c
[ 144.116883][ T1139] RSP: 0018:ffffc90004bcf9c0 EFLAGS: 00010293
[ 144.116897][ T1139] RAX: ffffffff89ec3bae RBX: 0000000000000001 RCX: ffff888023a25a00
[ 144.116899][ C1] __show_regs+0x159/0x610
[ 144.116909][ T1139] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[ 144.116918][ T1139] RBP: dffffc0000000000 R08: ffff88801d7715af R09: 1ffff11003aee2b5
[ 144.116921][ C1] ? dump_stack_print_info+0xf5/0x150
[ 144.116930][ T1139] R10: dffffc0000000000 R11: ffffed1003aee2b6 R12: 0000000000000001
[ 144.116941][ T1139] R13: ffff88801d7725d9 R14: ffff88802c9eac70 R15: ffff88802c9eace8
[ 144.116952][ C1] show_regs+0x44/0x90
[ 144.116961][ T1139] ? ieee80211_vif_use_reserved_switch+0xcee/0x28f0
[ 144.116974][ C1] __warn+0x160/0x470
[ 144.116993][ C1] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0
[ 144.117003][ T1139] ieee80211_link_use_reserved_context+0x383/0x5c0
[ 144.117018][ C1] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0
[ 144.117031][ T1139] ieee80211_csa_finalize+0x59a/0xf00
[ 144.117040][ C1] report_bug+0x2be/0x4f0
[ 144.117055][ T1139] ? mutex_lock_nested+0x20/0x20
[ 144.117057][ C1] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0
[ 144.117073][ T1139] ? lockdep_hardirqs_on_prepare+0x400/0x760
[ 144.117080][ C1] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0
[ 144.117093][ T1139] ? ieee80211_csa_finalize_work+0x140/0x140
[ 144.117102][ C1] ? ieee80211_vif_use_reserved_switch+0x10ea/0x28f0
[ 144.117118][ T1139] ? read_lock_is_recursive+0x20/0x20
[ 144.117125][ C1] handle_bug+0xcf/0x120
[ 144.117143][ C1] exc_invalid_op+0x1a/0x50
[ 144.117145][ T1139] ieee80211_csa_finalize_work+0xf6/0x140
[ 144.117160][ C1] asm_exc_invalid_op+0x1a/0x20
[ 144.117171][ T1139] ? process_scheduled_works+0x957/0x15b0
[ 144.117179][ C1] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0
[ 144.117192][ T1139] process_scheduled_works+0xa45/0x15b0
[ 144.117202][ C1] Code: 48 89 df e8 0a bf f0 f7 e9 dc fc ff ff e8 30 51 99 f7 eb 24 e8 29 51 99 f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 18 51 99 f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 0a 51 99 f7 48 8b 7c 24 08 4c 8b 7c
[ 144.117216][ C1] RSP: 0018:ffffc9000cde79c0 EFLAGS: 00010293
[ 144.117231][ C1] RAX: ffffffff89ec3bae RBX: 0000000000000001 RCX: ffff88802dc75a00
[ 144.117243][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[ 144.117241][ T1139] ? assign_work+0x400/0x400
[ 144.117253][ C1] RBP: dffffc0000000000 R08: ffff88807d3615af R09: 1ffff1100fa6c2b5
[ 144.117265][ C1] R10: dffffc0000000000 R11: ffffed100fa6c2b6 R12: 0000000000000001
[ 144.117269][ T1139] ? assign_work+0x39e/0x400
[ 144.117277][ C1] R13: ffff88807d3625d9 R14: ffff88801d332c70 R15: ffff88801d332ce8
[ 144.117295][ T1139] worker_thread+0xa55/0xfc0
[ 144.117297][ C1] ? ieee80211_vif_use_reserved_switch+0xcee/0x28f0
[ 144.117317][ T1139] ? _raw_spin_unlock_irqrestore+0xae/0x110
[ 144.117338][ T1139] ? _raw_spin_unlock+0x40/0x40
[ 144.117338][ C1] ieee80211_link_use_reserved_context+0x383/0x5c0
[ 144.117356][ T1139] ? _raw_spin_unlock_irqrestore+0x86/0x110
[ 144.117366][ C1] ieee80211_csa_finalize+0x59a/0xf00
[ 144.117390][ C1] ? mutex_lock_nested+0x20/0x20
[ 144.117396][ T1139] kthread+0x2fa/0x390
[ 144.117408][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x760
[ 144.117411][ T1139] ? pr_cont_work+0x560/0x560
[ 144.117432][ T1139] ? kthread_blkcg+0xd0/0xd0
[ 144.117428][ C1] ? ieee80211_csa_finalize_work+0x140/0x140
[ 144.117449][ T1139] ret_from_fork+0x48/0x80
[ 144.117453][ C1] ? read_lock_is_recursive+0x20/0x20
[ 144.117468][ T1139] ? kthread_blkcg+0xd0/0xd0
[ 144.117481][ C1] ieee80211_csa_finalize_work+0xf6/0x140
[ 144.117484][ T1139] ret_from_fork_asm+0x11/0x20
[ 144.117506][ C1] ? process_scheduled_works+0x957/0x15b0
[ 144.117528][ T1139]
[ 144.117528][ C1] process_scheduled_works+0xa45/0x15b0
[ 144.118108][ T1139] Kernel Offset: disabled