Warning: Permanently added '10.128.1.140' (ED25519) to the list of known hosts. 2026/04/10 13:55:35 parsed 1 programs [ 74.724837][ T4187] cgroup: Unknown subsys name 'net' [ 74.863640][ T4187] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.399715][ T4187] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 78.370115][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.384518][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.400271][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.425872][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.434064][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.444264][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.144510][ T144] ODEBUG: Out of memory. ODEBUG disabled [ 80.812735][ T4273] chnl_net:caif_netlink_parms(): no params data found [ 80.883304][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.891709][ T4273] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.900634][ T4273] device bridge_slave_0 entered promiscuous mode [ 80.910995][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.919643][ T4273] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.929429][ T4273] device bridge_slave_1 entered promiscuous mode [ 80.975910][ T4273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.988167][ T4273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.013246][ T4273] team0: Port device team_slave_0 added [ 81.026772][ T4273] team0: Port device team_slave_1 added [ 81.046636][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.053850][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.083500][ T4273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.114122][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.123003][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.154064][ T4273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.208097][ T4273] device hsr_slave_0 entered promiscuous mode [ 81.217235][ T4273] device hsr_slave_1 entered promiscuous mode [ 81.379597][ T4273] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.390854][ T4273] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.401740][ T4273] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.411215][ T4273] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.452913][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.460473][ T4273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.468530][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.476710][ T4273] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.558690][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.574663][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.587111][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.596205][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.604613][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 81.619365][ T4273] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.640529][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.652444][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.660935][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.671785][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.682889][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.692241][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.721833][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.747505][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.757769][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.779672][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.789780][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.803123][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.812397][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.824329][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.963175][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.971488][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.990195][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.016077][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.026902][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.053684][ T4273] device veth0_vlan entered promiscuous mode [ 82.061827][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.072725][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.083428][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.093623][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.109986][ T4273] device veth1_vlan entered promiscuous mode [ 82.138895][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 82.149446][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 82.159740][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.170071][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.182446][ T4273] device veth0_macvtap entered promiscuous mode [ 82.197023][ T4273] device veth1_macvtap entered promiscuous mode [ 82.218098][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.227109][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.236912][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 82.247332][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.258240][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.272514][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.280766][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.290348][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.303055][ T4273] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.313319][ T4273] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.324185][ T4273] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.333447][ T4273] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/04/10 13:55:46 executed programs: 0 [ 83.224109][ T4294] chnl_net:caif_netlink_parms(): no params data found [ 83.282779][ T4294] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.290531][ T4294] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.299424][ T4294] device bridge_slave_0 entered promiscuous mode [ 83.308599][ T4294] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.318753][ T4294] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.327546][ T4294] device bridge_slave_1 entered promiscuous mode [ 83.360514][ T4294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.373366][ T4294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.407982][ T4294] team0: Port device team_slave_0 added [ 83.417010][ T4294] team0: Port device team_slave_1 added [ 83.441894][ T4294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.449305][ T4294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.479023][ T4294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.493298][ T4294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.501452][ T4294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.530191][ T4294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.571238][ T4294] device hsr_slave_0 entered promiscuous mode [ 83.579285][ T4294] device hsr_slave_1 entered promiscuous mode [ 83.588160][ T4294] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.598453][ T4294] Cannot create hsr debugfs directory [ 83.700651][ T4294] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.106297][ T4261] Bluetooth: hci0: command 0x0409 tx timeout [ 86.473086][ T4294] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.981620][ T4294] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.043241][ T4294] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.181711][ T4294] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.189613][ T4262] Bluetooth: hci0: command 0x041b tx timeout [ 87.201007][ T4294] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.211114][ T4294] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.221507][ T4294] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.373295][ T4294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.392139][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 87.401367][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.415783][ T4294] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.429850][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 87.439529][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 87.450631][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.458033][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.477542][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 87.486637][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 87.496255][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 87.507516][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.514839][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.524509][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 87.544633][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 87.554277][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 87.566529][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 87.577163][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 87.586925][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 87.659672][ T4294] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 87.675575][ T4294] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.691091][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 87.700684][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 87.713144][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 87.722863][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 87.734961][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 87.780031][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 87.900329][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 87.908315][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 87.923375][ T4294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.954563][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 87.963906][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.987997][ T144] device hsr_slave_0 left promiscuous mode [ 87.996010][ T144] device hsr_slave_1 left promiscuous mode [ 88.002796][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.011051][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.020481][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.028390][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.037047][ T144] device bridge_slave_1 left promiscuous mode [ 88.044711][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.059537][ T144] device bridge_slave_0 left promiscuous mode [ 88.066825][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.085666][ T144] device veth1_macvtap left promiscuous mode [ 88.092325][ T144] device veth0_macvtap left promiscuous mode [ 88.098872][ T144] device veth1_vlan left promiscuous mode [ 88.106238][ T144] device veth0_vlan left promiscuous mode [ 88.269175][ T144] team0 (unregistering): Port device team_slave_1 removed [ 88.282830][ T144] team0 (unregistering): Port device team_slave_0 removed [ 88.300365][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 88.317343][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 88.383686][ T144] bond0 (unregistering): Released all slaves [ 88.449057][ T4294] device veth0_vlan entered promiscuous mode [ 88.459000][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 88.469092][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 88.479903][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 88.488150][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 88.500896][ T4294] device veth1_vlan entered promiscuous mode [ 88.547044][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.556666][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.570252][ T4294] device veth0_macvtap entered promiscuous mode [ 88.581079][ T4294] device veth1_macvtap entered promiscuous mode [ 88.600258][ T4294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.608994][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 88.619236][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 88.636601][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.648972][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.662848][ T4294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.672884][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.682620][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.697091][ T4294] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.707361][ T4294] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.717636][ T4294] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.726571][ T4294] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.803679][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.816663][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.826998][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.848922][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.857444][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.867317][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 2026/04/10 13:55:52 executed programs: 2 [ 88.931186][ T4315] netlink: 'syz.0.17': attribute type 27 has an invalid length. [ 89.266317][ T4262] Bluetooth: hci0: command 0x040f tx timeout [ 89.353528][ T4315] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.361885][ T4315] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.919981][ T4315] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.978244][ T4315] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.406420][ T4315] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.416171][ T4315] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.426231][ T4315] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.436010][ T4315] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.581376][ T4315] syz.0.17 (4315) used greatest stack depth: 19856 bytes left [ 90.626297][ T4317] ------------[ cut here ]------------ [ 90.632864][ T4317] wlan1: Failed check-sdata-in-driver check, flags: 0x4 [ 90.641398][ T4317] WARNING: CPU: 1 PID: 4317 at net/mac80211/driver-ops.h:172 ieee80211_bss_info_change_notify+0x37b/0x550 [ 90.670061][ T4317] Modules linked in: [ 90.674145][ T4317] CPU: 1 PID: 4317 Comm: syz.0.18 Not tainted syzkaller #0 [ 90.683228][ T4317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 90.693671][ T4317] RIP: 0010:ieee80211_bss_info_change_notify+0x37b/0x550 [ 90.703065][ T4317] Code: 39 7e f8 49 8b 84 24 00 06 00 00 49 81 c4 20 06 00 00 48 85 c0 4c 0f 45 e0 48 c7 c7 20 20 39 8b 4c 89 e6 89 ea e8 05 86 71 00 <0f> 0b e9 07 fd ff ff e8 a9 2d 39 f8 0f 0b e9 b1 fe ff ff e8 9d 2d [ 90.726012][ T4317] RSP: 0018:ffffc900030ff3a0 EFLAGS: 00010246 [ 90.732315][ T4317] RAX: 0df9bbb1364fae00 RBX: 0000000002000000 RCX: ffff88807ceb5940 [ 90.740902][ T4317] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 90.750755][ T4317] RBP: 0000000000000004 R08: ffff8880b9133d7f R09: 1ffff110172267af [ 90.759098][ T4317] R10: dffffc0000000000 R11: ffffed10172267b0 R12: ffff888075168000 [ 90.768828][ T4317] R13: ffff888075169290 R14: ffff88807e080e40 R15: ffff88807516a268 [ 90.777601][ T4317] FS: 0000555557b9b500(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 90.805140][ T4317] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 90.812696][ T4317] CR2: 000024a37b2e4000 CR3: 000000001fbb7000 CR4: 00000000003506e0 [ 90.845161][ T4317] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 90.853229][ T4317] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 90.872324][ T4317] Call Trace: [ 90.886511][ T4317] [ 90.896495][ T4317] ieee80211_set_mcast_rate+0x3b/0x50 [ 90.902359][ T4317] ? ieee80211_leave_ibss+0x20/0x20 [ 90.936913][ T4317] nl80211_set_mcast_rate+0x346/0x530 [ 90.942492][ T4317] ? nl80211_nan_change_config+0x6b0/0x6b0 [ 90.956296][ T4317] genl_rcv_msg+0xcea/0xf90 [ 90.961335][ T4317] ? genl_bind+0x380/0x380 [ 90.977954][ T4317] ? verify_lock_unused+0x140/0x140 [ 90.983535][ T4317] ? verify_lock_unused+0x140/0x140 [ 91.005275][ T4317] ? nl80211_nan_change_config+0x6b0/0x6b0 [ 91.011278][ T4317] netlink_rcv_skb+0x1f5/0x440 [ 91.035607][ T4317] ? genl_bind+0x380/0x380 [ 91.040409][ T4317] ? netlink_ack+0xb50/0xb50 [ 91.045106][ T4317] ? __lock_acquire+0x7d10/0x7d10 [ 91.052145][ T4317] ? down_read+0x1aa/0x2e0 [ 91.056863][ T4317] genl_rcv+0x24/0x40 [ 91.061180][ T4317] netlink_unicast+0x774/0x920 [ 91.067762][ T4317] netlink_sendmsg+0x8ba/0xbe0 [ 91.072602][ T4317] ? netlink_getsockopt+0x570/0x570 [ 91.078086][ T4317] ? aa_sock_msg_perm+0x94/0x150 [ 91.083169][ T4317] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 91.089875][ T4317] ? security_socket_sendmsg+0x7c/0xa0 [ 91.095652][ T4317] ? netlink_getsockopt+0x570/0x570 [ 91.101083][ T4317] ____sys_sendmsg+0x5b7/0x8f0 [ 91.107154][ T4317] ? __sys_sendmsg_sock+0x30/0x30 [ 91.112531][ T4317] ? import_iovec+0x6f/0xa0 [ 91.118172][ T4317] ___sys_sendmsg+0x236/0x2e0 [ 91.123219][ T4317] ? __sys_sendmsg+0x2a0/0x2a0 [ 91.129790][ T4317] __se_sys_sendmsg+0x1af/0x290 [ 91.134995][ T4317] ? __x64_sys_sendmsg+0x80/0x80 [ 91.140234][ T4317] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 91.147786][ T4317] ? lockdep_hardirqs_on+0x94/0x140 [ 91.153081][ T4317] do_syscall_64+0x4c/0xa0 [ 91.157778][ T4317] ? clear_bhb_loop+0x30/0x80 [ 91.162597][ T4317] ? clear_bhb_loop+0x30/0x80 [ 91.168855][ T4317] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 91.174994][ T4317] RIP: 0033:0x7f175de5a819 [ 91.179788][ T4317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.201565][ T4317] RSP: 002b:00007ffe73b0f298 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 91.210519][ T4317] RAX: ffffffffffffffda RBX: 00007f175e0d3fa0 RCX: 00007f175de5a819 [ 91.220249][ T4317] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 91.228728][ T4317] RBP: 00007f175def0c91 R08: 0000000000000000 R09: 0000000000000000 [ 91.238478][ T4317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.246658][ T4317] R13: 00007f175e0d3fac R14: 00007f175e0d3fa0 R15: 00007f175e0d3fa0 [ 91.256470][ T4317] [ 91.259643][ T4317] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 91.267026][ T4317] CPU: 1 PID: 4317 Comm: syz.0.18 Not tainted syzkaller #0 [ 91.274273][ T4317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 91.284732][ T4317] Call Trace: [ 91.288061][ T4317] [ 91.291028][ T4317] dump_stack_lvl+0x188/0x250 [ 91.295750][ T4317] ? show_regs_print_info+0x20/0x20 [ 91.301306][ T4317] ? load_image+0x400/0x400 [ 91.306175][ T4317] panic+0x2e5/0x810 [ 91.310346][ T4317] ? bpf_jit_dump+0xd0/0xd0 [ 91.314885][ T4317] ? ieee80211_bss_info_change_notify+0x37b/0x550 [ 91.321335][ T4317] __warn+0x248/0x2b0 [ 91.325662][ T4317] ? ieee80211_bss_info_change_notify+0x37b/0x550 [ 91.332133][ T4317] report_bug+0x1b7/0x2e0 [ 91.337020][ T4317] handle_bug+0x3a/0x70 [ 91.341297][ T4317] exc_invalid_op+0x16/0x40 [ 91.345996][ T4317] asm_exc_invalid_op+0x16/0x20 [ 91.351410][ T4317] RIP: 0010:ieee80211_bss_info_change_notify+0x37b/0x550 [ 91.358784][ T4317] Code: 39 7e f8 49 8b 84 24 00 06 00 00 49 81 c4 20 06 00 00 48 85 c0 4c 0f 45 e0 48 c7 c7 20 20 39 8b 4c 89 e6 89 ea e8 05 86 71 00 <0f> 0b e9 07 fd ff ff e8 a9 2d 39 f8 0f 0b e9 b1 fe ff ff e8 9d 2d [ 91.379083][ T4317] RSP: 0018:ffffc900030ff3a0 EFLAGS: 00010246 [ 91.385579][ T4317] RAX: 0df9bbb1364fae00 RBX: 0000000002000000 RCX: ffff88807ceb5940 [ 91.393682][ T4317] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 91.402092][ T4317] RBP: 0000000000000004 R08: ffff8880b9133d7f R09: 1ffff110172267af [ 91.410437][ T4317] R10: dffffc0000000000 R11: ffffed10172267b0 R12: ffff888075168000 [ 91.418702][ T4317] R13: ffff888075169290 R14: ffff88807e080e40 R15: ffff88807516a268 [ 91.427055][ T4317] ieee80211_set_mcast_rate+0x3b/0x50 [ 91.432730][ T4317] ? ieee80211_leave_ibss+0x20/0x20 [ 91.438359][ T4317] nl80211_set_mcast_rate+0x346/0x530 [ 91.443936][ T4317] ? nl80211_nan_change_config+0x6b0/0x6b0 [ 91.449946][ T4317] genl_rcv_msg+0xcea/0xf90 [ 91.454485][ T4317] ? genl_bind+0x380/0x380 [ 91.458925][ T4317] ? verify_lock_unused+0x140/0x140 [ 91.464379][ T4317] ? verify_lock_unused+0x140/0x140 [ 91.470214][ T4317] ? nl80211_nan_change_config+0x6b0/0x6b0 [ 91.476229][ T4317] netlink_rcv_skb+0x1f5/0x440 [ 91.481111][ T4317] ? genl_bind+0x380/0x380 [ 91.485563][ T4317] ? netlink_ack+0xb50/0xb50 [ 91.490297][ T4317] ? __lock_acquire+0x7d10/0x7d10 [ 91.495390][ T4317] ? down_read+0x1aa/0x2e0 [ 91.500101][ T4317] genl_rcv+0x24/0x40 [ 91.504115][ T4317] netlink_unicast+0x774/0x920 [ 91.508930][ T4317] netlink_sendmsg+0x8ba/0xbe0 [ 91.513807][ T4317] ? netlink_getsockopt+0x570/0x570 [ 91.519301][ T4317] ? aa_sock_msg_perm+0x94/0x150 [ 91.524399][ T4317] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 91.529891][ T4317] ? security_socket_sendmsg+0x7c/0xa0 [ 91.535375][ T4317] ? netlink_getsockopt+0x570/0x570 [ 91.540598][ T4317] ____sys_sendmsg+0x5b7/0x8f0 [ 91.545391][ T4317] ? __sys_sendmsg_sock+0x30/0x30 [ 91.550627][ T4317] ? import_iovec+0x6f/0xa0 [ 91.555356][ T4317] ___sys_sendmsg+0x236/0x2e0 [ 91.560243][ T4317] ? __sys_sendmsg+0x2a0/0x2a0 [ 91.565109][ T4317] __se_sys_sendmsg+0x1af/0x290 [ 91.570012][ T4317] ? __x64_sys_sendmsg+0x80/0x80 [ 91.575189][ T4317] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 91.581449][ T4317] ? lockdep_hardirqs_on+0x94/0x140 [ 91.586938][ T4317] do_syscall_64+0x4c/0xa0 [ 91.591375][ T4317] ? clear_bhb_loop+0x30/0x80 [ 91.596071][ T4317] ? clear_bhb_loop+0x30/0x80 [ 91.601541][ T4317] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 91.607983][ T4317] RIP: 0033:0x7f175de5a819 [ 91.612491][ T4317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.633121][ T4317] RSP: 002b:00007ffe73b0f298 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 91.641642][ T4317] RAX: ffffffffffffffda RBX: 00007f175e0d3fa0 RCX: 00007f175de5a819 [ 91.649636][ T4317] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 91.657873][ T4317] RBP: 00007f175def0c91 R08: 0000000000000000 R09: 0000000000000000 [ 91.665957][ T4317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.673954][ T4317] R13: 00007f175e0d3fac R14: 00007f175e0d3fa0 R15: 00007f175e0d3fa0 [ 91.682269][ T4317] [ 91.685866][ T4317] Kernel Offset: disabled [ 91.690737][ T4317] Rebooting in 86400 seconds..