Warning: Permanently added '10.128.1.94' (ED25519) to the list of known hosts. 2026/04/26 06:13:54 parsed 1 programs [ 63.929051][ T4188] cgroup: Unknown subsys name 'net' [ 64.044912][ T4188] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.503810][ T4188] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 68.692788][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.712348][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.722490][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.748500][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.757399][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.766281][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.005945][ T4246] chnl_net:caif_netlink_parms(): no params data found [ 69.070359][ T4246] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.078473][ T4246] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.086584][ T4246] device bridge_slave_0 entered promiscuous mode [ 69.096607][ T4246] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.104084][ T4246] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.112421][ T4246] device bridge_slave_1 entered promiscuous mode [ 69.141951][ T4246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.153611][ T4246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.191311][ T4246] team0: Port device team_slave_0 added [ 69.202956][ T4246] team0: Port device team_slave_1 added [ 69.229092][ T4246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.236084][ T4246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.262283][ T4246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.275603][ T4246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.283098][ T4246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.309457][ T4246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.356587][ T4246] device hsr_slave_0 entered promiscuous mode [ 69.369480][ T4246] device hsr_slave_1 entered promiscuous mode [ 69.461053][ T4246] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.471834][ T4246] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.482793][ T4246] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.491610][ T4246] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.512103][ T4246] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.519773][ T4246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.527759][ T4246] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.534897][ T4246] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.575416][ T4246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.589742][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.598846][ T1171] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.608996][ T1171] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.622746][ T4246] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.633949][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.642776][ T1171] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.650024][ T1171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.661091][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.669962][ T1171] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.677223][ T1171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.691806][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.730206][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.739793][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.748231][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.757428][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.766348][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.775604][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.785223][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.794232][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.802729][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.814987][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.926182][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.935164][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.948558][ T4246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.982388][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.991313][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.008666][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.017985][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.027982][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.036396][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.066556][ T4246] device veth0_vlan entered promiscuous mode [ 70.077095][ T4246] device veth1_vlan entered promiscuous mode [ 70.095642][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.104517][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.112848][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.121639][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.133244][ T4246] device veth0_macvtap entered promiscuous mode [ 70.163692][ T4246] device veth1_macvtap entered promiscuous mode [ 70.179783][ T4246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.187657][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.196360][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.204633][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.214207][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.229345][ T4246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.236672][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.245718][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.274837][ T4246] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.284472][ T4246] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.293336][ T4246] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.302576][ T4246] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.404216][ T4246] syz-executor (4246) used greatest stack depth: 20272 bytes left [ 71.503255][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.510164][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 2026/04/26 06:14:03 executed programs: 0 [ 71.923762][ T4294] chnl_net:caif_netlink_parms(): no params data found [ 71.988222][ T4294] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.995730][ T4294] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.004646][ T4294] device bridge_slave_0 entered promiscuous mode [ 72.013517][ T4294] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.020930][ T4294] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.029534][ T4294] device bridge_slave_1 entered promiscuous mode [ 72.054377][ T4294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.066280][ T4294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.092512][ T4294] team0: Port device team_slave_0 added [ 72.100287][ T4294] team0: Port device team_slave_1 added [ 72.119238][ T4294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.126298][ T4294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.155972][ T4294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.172297][ T4294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.181362][ T4294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.210384][ T4294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.253406][ T4294] device hsr_slave_0 entered promiscuous mode [ 72.260539][ T4294] device hsr_slave_1 entered promiscuous mode [ 72.267290][ T4294] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.277242][ T4294] Cannot create hsr debugfs directory [ 72.365473][ T4294] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.820125][ T4269] Bluetooth: hci0: command 0x0409 tx timeout [ 75.176153][ T4294] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.243629][ T4294] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.287255][ T4294] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.413885][ T4294] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.424514][ T4294] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.434319][ T4294] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.444912][ T4294] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.504503][ T4294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.531327][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.539904][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.551342][ T4294] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.560924][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.569871][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.578388][ T4242] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.585712][ T4242] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.594083][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.606002][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.614935][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.623839][ T4242] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.630936][ T4242] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.651710][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.660745][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.670676][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.680410][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.692441][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.700451][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.710715][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.731703][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.740519][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.752792][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.761588][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.772838][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.884888][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.893320][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.900808][ T4265] Bluetooth: hci0: command 0x041b tx timeout [ 75.925981][ T4294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.943091][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.952078][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.967811][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.977286][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.989903][ T4294] device veth0_vlan entered promiscuous mode [ 75.996424][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.004634][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.029861][ T4294] device veth1_vlan entered promiscuous mode [ 76.047594][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.056023][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.064682][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.073849][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.084156][ T4294] device veth0_macvtap entered promiscuous mode [ 76.097294][ T144] device hsr_slave_0 left promiscuous mode [ 76.104195][ T144] device hsr_slave_1 left promiscuous mode [ 76.111118][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.118586][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.127725][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.136597][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.144771][ T144] device bridge_slave_1 left promiscuous mode [ 76.152089][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.164477][ T144] device bridge_slave_0 left promiscuous mode [ 76.171885][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.187336][ T144] device veth1_macvtap left promiscuous mode [ 76.193836][ T144] device veth0_macvtap left promiscuous mode [ 76.200750][ T144] device veth1_vlan left promiscuous mode [ 76.206623][ T144] device veth0_vlan left promiscuous mode [ 76.356272][ T144] team0 (unregistering): Port device team_slave_1 removed [ 76.368055][ T144] team0 (unregistering): Port device team_slave_0 removed [ 76.387957][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 76.405776][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 76.456506][ T144] bond0 (unregistering): Released all slaves [ 76.522959][ T4294] device veth1_macvtap entered promiscuous mode [ 76.540930][ T4294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.551612][ T4294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.560143][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.568280][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.576870][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.585533][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.594753][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.603555][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.618462][ T4294] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.630609][ T4294] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.639964][ T4294] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.648745][ T4294] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.705468][ T1171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.716711][ T1171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.725411][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.757449][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.765369][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.773271][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.820448][ T4306] netlink: 'syz.0.17': attribute type 27 has an invalid length. [ 77.036459][ T4306] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.044197][ T4306] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.325918][ T4306] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.355152][ T4306] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.656542][ T4306] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.665696][ T4306] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.674982][ T4306] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.684511][ T4306] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.761252][ T4306] ------------[ cut here ]------------ [ 77.767000][ T4306] wlan1: Failed check-sdata-in-driver check, flags: 0x4 [ 77.775522][ T4306] WARNING: CPU: 0 PID: 4306 at net/mac80211/driver-ops.h:172 ieee80211_bss_info_change_notify+0x37b/0x550 [ 77.787069][ T4306] Modules linked in: [ 77.791504][ T4306] CPU: 1 PID: 4306 Comm: syz.0.17 Not tainted syzkaller #0 [ 77.800565][ T4306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 77.811030][ T4306] RIP: 0010:ieee80211_bss_info_change_notify+0x37b/0x550 [ 77.818507][ T4306] Code: 0b 7e f8 49 8b 84 24 00 06 00 00 49 81 c4 20 06 00 00 48 85 c0 4c 0f 45 e0 48 c7 c7 c0 31 39 8b 4c 89 e6 89 ea e8 e5 a0 71 00 <0f> 0b e9 07 fd ff ff e8 09 ec 38 f8 0f 0b e9 b1 fe ff ff e8 fd eb [ 77.839671][ T4306] RSP: 0018:ffffc9000303f3a0 EFLAGS: 00010246 [ 77.845903][ T4306] RAX: b06ca598b15a6b00 RBX: 0000000002000000 RCX: ffff888028cc0000 [ 77.854235][ T4306] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 77.862288][ T4306] RBP: 0000000000000004 R08: ffffc9000303eec7 R09: 1ffff92000607dd8 [ 77.870355][ T4306] R10: dffffc0000000000 R11: fffff52000607dd9 R12: ffff8880774c0000 [ 77.878456][ T4306] R13: ffff8880774c1290 R14: ffff88807db20e00 R15: ffff8880774c2268 [ 77.886525][ T4306] FS: 00005555779a5500(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 77.895723][ T4306] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 77.902517][ T4306] CR2: 00007f8c2e013c40 CR3: 00000000197e3000 CR4: 00000000003506f0 [ 77.910678][ T4306] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 77.918689][ T4306] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 77.926836][ T4306] Call Trace: [ 77.930171][ T4306] [ 77.933128][ T4306] ieee80211_set_mcast_rate+0x3b/0x50 [ 77.938716][ T4306] ? ieee80211_leave_ibss+0x20/0x20 [ 77.944080][ T4306] nl80211_set_mcast_rate+0x346/0x530 [ 77.949531][ T4306] ? nl80211_nan_change_config+0x6b0/0x6b0 [ 77.955488][ T4306] genl_rcv_msg+0xcea/0xf90 [ 77.960489][ T4306] ? genl_bind+0x380/0x380 [ 77.964955][ T4306] ? verify_lock_unused+0x140/0x140 [ 77.970542][ T4306] ? verify_lock_unused+0x140/0x140 [ 77.975887][ T4306] ? nl80211_nan_change_config+0x6b0/0x6b0 [ 77.982162][ T4306] netlink_rcv_skb+0x1f5/0x440 [ 77.986958][ T4306] ? genl_bind+0x380/0x380 [ 77.989169][ T4269] Bluetooth: hci0: command 0x040f tx timeout [ 77.991755][ T4306] ? netlink_ack+0xb50/0xb50 [ 78.002220][ T4306] ? __lock_acquire+0x7d10/0x7d10 [ 78.007368][ T4306] ? down_read+0x1aa/0x2e0 [ 78.012278][ T4306] genl_rcv+0x24/0x40 [ 78.016286][ T4306] netlink_unicast+0x774/0x920 [ 78.021525][ T4306] netlink_sendmsg+0x8ba/0xbe0 [ 78.026335][ T4306] ? netlink_getsockopt+0x570/0x570 [ 78.031866][ T4306] ? aa_sock_msg_perm+0x94/0x150 [ 78.036836][ T4306] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 78.042532][ T4306] ? security_socket_sendmsg+0x7c/0xa0 [ 78.048115][ T4306] ? netlink_getsockopt+0x570/0x570 [ 78.053621][ T4306] ____sys_sendmsg+0x5b7/0x8f0 [ 78.058434][ T4306] ? __sys_sendmsg_sock+0x30/0x30 [ 78.063820][ T4306] ? import_iovec+0x6f/0xa0 [ 78.068368][ T4306] ___sys_sendmsg+0x236/0x2e0 [ 78.073798][ T4306] ? __sys_sendmsg+0x2a0/0x2a0 [ 78.078642][ T4306] __se_sys_sendmsg+0x1af/0x290 [ 78.083871][ T4306] ? __x64_sys_sendmsg+0x80/0x80 [ 78.088832][ T4306] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 78.095344][ T4306] ? lockdep_hardirqs_on+0x94/0x140 [ 78.101058][ T4306] do_syscall_64+0x4c/0xa0 [ 78.105642][ T4306] ? clear_bhb_loop+0x30/0x80 [ 78.110728][ T4306] ? clear_bhb_loop+0x30/0x80 [ 78.115435][ T4306] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 78.121671][ T4306] RIP: 0033:0x7f8c2e028dd9 [ 78.126114][ T4306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.146305][ T4306] RSP: 002b:00007ffe155c18f8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 78.155203][ T4306] RAX: ffffffffffffffda RBX: 00007f8c2e2a1fa0 RCX: 00007f8c2e028dd9 [ 78.163824][ T4306] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000004 [ 78.172157][ T4306] RBP: 00007f8c2e0bed69 R08: 0000000000000000 R09: 0000000000000000 [ 78.180488][ T4306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.188482][ T4306] R13: 00007f8c2e2a1fac R14: 00007f8c2e2a1fa0 R15: 00007f8c2e2a1fa0 [ 78.196845][ T4306] [ 78.200401][ T4306] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 78.207873][ T4306] CPU: 0 PID: 4306 Comm: syz.0.17 Not tainted syzkaller #0 [ 78.215180][ T4306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 78.225257][ T4306] Call Trace: [ 78.228548][ T4306] [ 78.231553][ T4306] dump_stack_lvl+0x188/0x250 [ 78.236353][ T4306] ? show_regs_print_info+0x20/0x20 [ 78.241575][ T4306] ? load_image+0x400/0x400 [ 78.246126][ T4306] panic+0x2e5/0x810 [ 78.250138][ T4306] ? bpf_jit_dump+0xd0/0xd0 [ 78.254675][ T4306] ? ieee80211_bss_info_change_notify+0x37b/0x550 [ 78.261113][ T4306] __warn+0x248/0x2b0 [ 78.265205][ T4306] ? ieee80211_bss_info_change_notify+0x37b/0x550 [ 78.271652][ T4306] report_bug+0x1b7/0x2e0 [ 78.276110][ T4306] handle_bug+0x3a/0x70 [ 78.280553][ T4306] exc_invalid_op+0x16/0x40 [ 78.285077][ T4306] asm_exc_invalid_op+0x16/0x20 [ 78.289945][ T4306] RIP: 0010:ieee80211_bss_info_change_notify+0x37b/0x550 [ 78.297096][ T4306] Code: 0b 7e f8 49 8b 84 24 00 06 00 00 49 81 c4 20 06 00 00 48 85 c0 4c 0f 45 e0 48 c7 c7 c0 31 39 8b 4c 89 e6 89 ea e8 e5 a0 71 00 <0f> 0b e9 07 fd ff ff e8 09 ec 38 f8 0f 0b e9 b1 fe ff ff e8 fd eb [ 78.317066][ T4306] RSP: 0018:ffffc9000303f3a0 EFLAGS: 00010246 [ 78.323155][ T4306] RAX: b06ca598b15a6b00 RBX: 0000000002000000 RCX: ffff888028cc0000 [ 78.331244][ T4306] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 78.339491][ T4306] RBP: 0000000000000004 R08: ffffc9000303eec7 R09: 1ffff92000607dd8 [ 78.347657][ T4306] R10: dffffc0000000000 R11: fffff52000607dd9 R12: ffff8880774c0000 [ 78.355797][ T4306] R13: ffff8880774c1290 R14: ffff88807db20e00 R15: ffff8880774c2268 [ 78.363824][ T4306] ieee80211_set_mcast_rate+0x3b/0x50 [ 78.369321][ T4306] ? ieee80211_leave_ibss+0x20/0x20 [ 78.374544][ T4306] nl80211_set_mcast_rate+0x346/0x530 [ 78.379946][ T4306] ? nl80211_nan_change_config+0x6b0/0x6b0 [ 78.385912][ T4306] genl_rcv_msg+0xcea/0xf90 [ 78.390479][ T4306] ? genl_bind+0x380/0x380 [ 78.395021][ T4306] ? verify_lock_unused+0x140/0x140 [ 78.400244][ T4306] ? verify_lock_unused+0x140/0x140 [ 78.405478][ T4306] ? nl80211_nan_change_config+0x6b0/0x6b0 [ 78.411325][ T4306] netlink_rcv_skb+0x1f5/0x440 [ 78.416201][ T4306] ? genl_bind+0x380/0x380 [ 78.420734][ T4306] ? netlink_ack+0xb50/0xb50 [ 78.425820][ T4306] ? __lock_acquire+0x7d10/0x7d10 [ 78.430981][ T4306] ? down_read+0x1aa/0x2e0 [ 78.435511][ T4306] genl_rcv+0x24/0x40 [ 78.439526][ T4306] netlink_unicast+0x774/0x920 [ 78.444332][ T4306] netlink_sendmsg+0x8ba/0xbe0 [ 78.449136][ T4306] ? netlink_getsockopt+0x570/0x570 [ 78.454570][ T4306] ? aa_sock_msg_perm+0x94/0x150 [ 78.459537][ T4306] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 78.464934][ T4306] ? security_socket_sendmsg+0x7c/0xa0 [ 78.470416][ T4306] ? netlink_getsockopt+0x570/0x570 [ 78.475730][ T4306] ____sys_sendmsg+0x5b7/0x8f0 [ 78.480704][ T4306] ? __sys_sendmsg_sock+0x30/0x30 [ 78.485773][ T4306] ? import_iovec+0x6f/0xa0 [ 78.490300][ T4306] ___sys_sendmsg+0x236/0x2e0 [ 78.495009][ T4306] ? __sys_sendmsg+0x2a0/0x2a0 [ 78.499838][ T4306] __se_sys_sendmsg+0x1af/0x290 [ 78.504817][ T4306] ? __x64_sys_sendmsg+0x80/0x80 [ 78.509880][ T4306] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 78.515985][ T4306] ? lockdep_hardirqs_on+0x94/0x140 [ 78.521208][ T4306] do_syscall_64+0x4c/0xa0 [ 78.525728][ T4306] ? clear_bhb_loop+0x30/0x80 [ 78.530424][ T4306] ? clear_bhb_loop+0x30/0x80 [ 78.535136][ T4306] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 78.541236][ T4306] RIP: 0033:0x7f8c2e028dd9 [ 78.545681][ T4306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.565516][ T4306] RSP: 002b:00007ffe155c18f8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 78.573962][ T4306] RAX: ffffffffffffffda RBX: 00007f8c2e2a1fa0 RCX: 00007f8c2e028dd9 [ 78.581965][ T4306] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000004 [ 78.589950][ T4306] RBP: 00007f8c2e0bed69 R08: 0000000000000000 R09: 0000000000000000 [ 78.598110][ T4306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.606100][ T4306] R13: 00007f8c2e2a1fac R14: 00007f8c2e2a1fa0 R15: 00007f8c2e2a1fa0 [ 78.614106][ T4306] [ 78.617222][ T4306] Kernel Offset: disabled [ 78.621818][ T4306] Rebooting in 86400 seconds..