Warning: Permanently added '10.128.0.151' (ED25519) to the list of known hosts. 2025/07/14 02:12:54 ignoring optional flag "sandboxArg"="0" 2025/07/14 02:12:56 parsed 1 programs [ 89.337434][ T5789] cgroup: Unknown subsys name 'net' [ 89.474661][ T5789] cgroup: Unknown subsys name 'rlimit' [ 91.148634][ T5789] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.207743][ T787] cfg80211: failed to load regulatory.db [ 94.610844][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 94.619573][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 94.627619][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 94.636337][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 94.645066][ T5831] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 94.653215][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.064390][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.077063][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.114810][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.124269][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.006710][ T5868] chnl_net:caif_netlink_parms(): no params data found [ 97.104378][ T5868] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.113371][ T5868] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.121349][ T5868] bridge_slave_0: entered allmulticast mode [ 97.129452][ T5868] bridge_slave_0: entered promiscuous mode [ 97.164934][ T5868] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.173185][ T5868] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.180552][ T5868] bridge_slave_1: entered allmulticast mode [ 97.187942][ T5868] bridge_slave_1: entered promiscuous mode [ 97.227964][ T5868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.241990][ T5868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.298147][ T5868] team0: Port device team_slave_0 added [ 97.307309][ T5868] team0: Port device team_slave_1 added [ 97.363788][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.373595][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.400308][ T5868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.415119][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.422237][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.448477][ T5868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.504705][ T5868] hsr_slave_0: entered promiscuous mode [ 97.511962][ T5868] hsr_slave_1: entered promiscuous mode [ 97.714501][ T5868] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.727712][ T5868] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.738276][ T5868] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.754762][ T5868] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.790224][ T5868] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.797602][ T5868] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.805945][ T5868] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.813119][ T5868] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.885577][ T5868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.909307][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.918853][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.939283][ T5868] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.959471][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.966716][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.982703][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.989932][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.221291][ T5868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.267339][ T5868] veth0_vlan: entered promiscuous mode [ 98.281164][ T5868] veth1_vlan: entered promiscuous mode [ 98.313217][ T5868] veth0_macvtap: entered promiscuous mode [ 98.323645][ T5868] veth1_macvtap: entered promiscuous mode [ 98.342821][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.358703][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.370866][ T5868] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.382334][ T5868] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.391443][ T5868] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.400349][ T5868] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.559933][ T62] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2025/07/14 02:13:08 executed programs: 0 [ 98.973024][ T5101] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.981557][ T5101] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 98.991776][ T5101] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 99.000804][ T5101] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 99.009645][ T5101] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 99.017301][ T5101] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 99.199037][ T5893] chnl_net:caif_netlink_parms(): no params data found [ 99.278147][ T5893] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.285353][ T5893] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.293211][ T5893] bridge_slave_0: entered allmulticast mode [ 99.301082][ T5893] bridge_slave_0: entered promiscuous mode [ 99.309737][ T5893] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.317572][ T5893] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.324754][ T5893] bridge_slave_1: entered allmulticast mode [ 99.333473][ T5893] bridge_slave_1: entered promiscuous mode [ 99.369125][ T5893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.381835][ T5893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.419360][ T5893] team0: Port device team_slave_0 added [ 99.428444][ T5893] team0: Port device team_slave_1 added [ 99.457089][ T5893] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.464090][ T5893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.491033][ T5893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.507969][ T5893] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.514974][ T5893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.542281][ T5893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.598800][ T5893] hsr_slave_0: entered promiscuous mode [ 99.605222][ T5893] hsr_slave_1: entered promiscuous mode [ 99.612638][ T5893] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.620836][ T5893] Cannot create hsr debugfs directory [ 101.086982][ T5101] Bluetooth: hci0: command tx timeout [ 101.219922][ T62] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.166551][ T5101] Bluetooth: hci0: command tx timeout [ 103.420347][ T62] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.502206][ T62] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.434171][ T62] hsr_slave_0: left promiscuous mode [ 104.443269][ T62] hsr_slave_1: left promiscuous mode [ 104.450279][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.459838][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.469428][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.478960][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.487298][ T62] bridge_slave_1: left allmulticast mode [ 104.493013][ T62] bridge_slave_1: left promiscuous mode [ 104.500398][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.514469][ T62] bridge_slave_0: left allmulticast mode [ 104.521555][ T62] bridge_slave_0: left promiscuous mode [ 104.528469][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.560990][ T62] veth1_macvtap: left promiscuous mode [ 104.569680][ T62] veth0_macvtap: left promiscuous mode [ 104.575423][ T62] veth1_vlan: left promiscuous mode [ 104.581592][ T62] veth0_vlan: left promiscuous mode [ 105.048893][ T62] team0 (unregistering): Port device team_slave_1 removed [ 105.083887][ T62] team0 (unregistering): Port device team_slave_0 removed [ 105.123113][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.160619][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.250169][ T5101] Bluetooth: hci0: command tx timeout [ 105.512280][ T62] bond0 (unregistering): Released all slaves [ 105.599009][ T5893] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.609996][ T5893] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.623691][ T5893] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.634310][ T5893] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.775236][ T5893] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.798809][ T5893] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.812178][ T2988] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.819397][ T2988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.840884][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.848109][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.081239][ T5893] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.132715][ T5893] veth0_vlan: entered promiscuous mode [ 106.144876][ T5893] veth1_vlan: entered promiscuous mode [ 106.183104][ T5893] veth0_macvtap: entered promiscuous mode [ 106.193666][ T5893] veth1_macvtap: entered promiscuous mode [ 106.218873][ T5893] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.235061][ T5893] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.248447][ T5893] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.259183][ T5893] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.268472][ T5893] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.277563][ T5893] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.353775][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.362476][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.393717][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.402284][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.489074][ C0] ------------[ cut here ]------------ [ 106.494759][ C0] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0xfff with flags 0x20 [ 106.505785][ C0] WARNING: CPU: 0 PID: 5893 at net/mac80211/rate.c:385 __rate_control_send_low+0x635/0x880 [ 106.515889][ C0] Modules linked in: [ 106.519813][ C0] CPU: 0 PID: 5893 Comm: syz-executor Not tainted 6.6.97-syzkaller #0 [ 106.528078][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 106.538214][ C0] RIP: 0010:__rate_control_send_low+0x635/0x880 [ 106.544485][ C0] Code: 30 42 0f b6 04 28 84 c0 0f 85 e6 01 00 00 41 8b 0e 48 c7 c7 c0 87 be 8b 48 8b 74 24 10 44 8b 44 24 1c 45 89 e1 e8 db 6e 69 f7 <0f> 0b e9 78 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fa ff [ 106.564275][ C0] RSP: 0018:ffffc90000007560 EFLAGS: 00010246 [ 106.570440][ C0] RAX: 469c9f1d502d4000 RBX: 000000000000000c RCX: ffff888024330000 [ 106.578530][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 106.586605][ C0] RBP: 0000000000000084 R08: ffffc90000007167 R09: 1ffff92000000e2c [ 106.594658][ C0] R10: dffffc0000000000 R11: fffff52000000e2d R12: 0000000000000020 [ 106.602737][ C0] R13: dffffc0000000000 R14: ffff88807c77b358 R15: ffff888076ee3ca8 [ 106.610821][ C0] FS: 0000555584648500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 106.619853][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 106.626557][ C0] CR2: 00007fff52604e40 CR3: 000000002ee63000 CR4: 00000000003506f0 [ 106.634580][ C0] Call Trace: [ 106.637945][ C0] [ 106.640845][ C0] rate_control_send_low+0x194/0x790 [ 106.646223][ C0] rate_control_get_rate+0x20b/0x5c0 [ 106.651580][ C0] ieee80211_beacon_get_finish+0x38d/0x6b0 [ 106.657504][ C0] ? ieee80211_set_beacon_cntdwn+0x660/0x660 [ 106.663530][ C0] ? __local_bh_enable_ip+0x12e/0x1c0 [ 106.669004][ C0] ? _local_bh_enable+0xa0/0xa0 [ 106.673905][ C0] ieee80211_beacon_get_ap+0x1429/0x1970 [ 106.679646][ C0] ? ieee80211_tx_8023+0x3c0/0x3c0 [ 106.684811][ C0] ? read_lock_is_recursive+0x20/0x20 [ 106.690302][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 106.695960][ C0] __ieee80211_beacon_get+0x10eb/0x1600 [ 106.701580][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 106.707244][ C0] ieee80211_beacon_get_tim+0xb8/0x560 [ 106.712779][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 106.719666][ C0] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 106.725256][ C0] __iterate_interfaces+0x243/0x500 [ 106.730577][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 106.736926][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 106.744149][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 106.750485][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 106.757607][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 106.762832][ C0] __hrtimer_run_queues+0x51e/0xc40 [ 106.768122][ C0] ? hw_scan_work+0x1060/0x1060 [ 106.773032][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 106.778244][ C0] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 106.784370][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 106.789581][ C0] handle_softirqs+0x280/0x820 [ 106.794397][ C0] ? __irq_exit_rcu+0xc7/0x190 [ 106.799289][ C0] ? do_softirq+0x180/0x180 [ 106.803845][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 106.809149][ C0] __irq_exit_rcu+0xc7/0x190 [ 106.813807][ C0] ? irq_exit_rcu+0x20/0x20 [ 106.818413][ C0] irq_exit_rcu+0x9/0x20 [ 106.822696][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 106.828459][ C0] [ 106.831439][ C0] [ 106.834415][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 106.840520][ C0] RIP: 0010:preempt_count_add+0x84/0x1a0 [ 106.846264][ C0] Code: 83 3d cf 71 8f 15 00 75 11 65 8b 05 4e 57 a8 7e 0f b6 c0 3d f5 00 00 00 73 58 65 8b 05 3d 57 a8 7e 25 ff ff ff 7f 39 f8 75 42 <48> 8b 5c 24 18 48 89 df e8 ff d3 0c 00 85 c0 74 09 31 db 31 ff e8 [ 106.866067][ C0] RSP: 0018:ffffc90003307390 EFLAGS: 00000246 [ 106.872182][ C0] RAX: 0000000000000001 RBX: ffff888060a11b98 RCX: ffffffff96ead403 [ 106.880249][ C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000001 [ 106.888305][ C0] RBP: ffffc900033074b0 R08: ffff888060a11b9b R09: 1ffff1100c142373 [ 106.896370][ C0] R10: dffffc0000000000 R11: ffffed100c142374 R12: dffffc0000000000 [ 106.904395][ C0] R13: dffffc0000000000 R14: ffff888060a11b00 R15: dffffc0000000000 [ 106.912485][ C0] _raw_spin_lock+0x12/0x40 [ 106.917064][ C0] inode_wait_for_writeback+0x88/0x200 [ 106.922551][ C0] ? evict+0x451/0x870 [ 106.926736][ C0] ? sb_clear_inode_writeback+0x360/0x360 [ 106.932503][ C0] ? do_raw_spin_lock+0x121/0x2c0 [ 106.937643][ C0] ? __rwlock_init+0x150/0x150 [ 106.942461][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 106.947775][ C0] evict+0x459/0x870 [ 106.951728][ C0] ? __lock_acquire+0x7c80/0x7c80 [ 106.956868][ C0] ? proc_nr_inodes+0x230/0x230 [ 106.961781][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 106.967123][ C0] ? _raw_spin_unlock+0x28/0x40 [ 106.972022][ C0] ? iput+0x70a/0x920 [ 106.976100][ C0] __dentry_kill+0x431/0x650 [ 106.980730][ C0] shrink_dentry_list+0x39f/0x6a0 [ 106.985852][ C0] shrink_dcache_parent+0xac/0x3c0 [ 106.991042][ C0] ? write_sequnlock+0x30/0x30 [ 106.995911][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 107.001160][ C0] d_invalidate+0x11c/0x260 [ 107.005711][ C0] ? __rwlock_init+0x150/0x150 [ 107.010607][ C0] ? do_one_tree+0xe0/0xe0 [ 107.015075][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 107.020377][ C0] proc_invalidate_siblings_dcache+0x3d3/0x6c0 [ 107.026611][ C0] ? proc_invalidate_siblings_dcache+0x2b/0x6c0 [ 107.032884][ C0] release_task+0x145b/0x1610 [ 107.037769][ C0] ? wait_consider_task+0x1992/0x2ea0 [ 107.043200][ C0] ? delayed_put_task_struct+0x2b0/0x2b0 [ 107.048934][ C0] ? __rwlock_init+0x150/0x150 [ 107.053837][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 107.059122][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 107.064370][ C0] wait_consider_task+0x1992/0x2ea0 [ 107.069671][ C0] ? do_wait+0x2f8/0xaf0 [ 107.073963][ C0] ? child_wait_callback+0x230/0x230 [ 107.079385][ C0] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 107.085348][ C0] ? _raw_spin_unlock+0x40/0x40 [ 107.090301][ C0] ? add_wait_queue+0xba/0x170 [ 107.095113][ C0] do_wait+0x2f8/0xaf0 [ 107.099294][ C0] kernel_wait4+0x1af/0x270 [ 107.103855][ C0] ? __ia32_sys_waitid+0xc0/0xc0 [ 107.108895][ C0] ? restore_signal_shadow_stack+0x39d/0x460 [ 107.114936][ C0] ? kernel_waitid+0x360/0x360 [ 107.119815][ C0] __x64_sys_wait4+0x134/0x1e0 [ 107.124806][ C0] ? kernel_wait+0x170/0x170 [ 107.129503][ C0] ? lock_chain_count+0x20/0x20 [ 107.134407][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 107.139697][ C0] do_syscall_64+0x55/0xb0 [ 107.144161][ C0] ? clear_bhb_loop+0x40/0x90 [ 107.149007][ C0] ? clear_bhb_loop+0x40/0x90 [ 107.153756][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 107.159734][ C0] RIP: 0033:0x7f12dbb84b97 [ 107.164207][ C0] Code: 89 7c 24 10 48 89 4c 24 18 e8 45 1b 03 00 4c 8b 54 24 18 8b 54 24 14 41 89 c0 48 8b 74 24 08 8b 7c 24 10 b8 3d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 89 44 24 10 e8 95 1b 03 00 8b 44 [ 107.183894][ C0] RSP: 002b:00007fff52605250 EFLAGS: 00000293 ORIG_RAX: 000000000000003d [ 107.192414][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f12dbb84b97 [ 107.200457][ C0] RDX: 0000000040000001 RSI: 00007fff526052bc RDI: 00000000ffffffff [ 107.208549][ C0] RBP: 00007fff526052bc R08: 0000000000000000 R09: 0000000000000000 [ 107.216628][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 107.224654][ C0] R13: 00000000000927c0 R14: 0000000000019fd3 R15: 00007fff52605310 [ 107.232730][ C0] [ 107.235847][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 107.243151][ C0] CPU: 0 PID: 5893 Comm: syz-executor Not tainted 6.6.97-syzkaller #0 [ 107.251314][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 107.261383][ C0] Call Trace: [ 107.264669][ C0] [ 107.267522][ C0] dump_stack_lvl+0x16c/0x230 [ 107.272219][ C0] ? show_regs_print_info+0x20/0x20 [ 107.277435][ C0] ? load_image+0x3b0/0x3b0 [ 107.281960][ C0] panic+0x2c0/0x710 [ 107.285889][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 107.290414][ C0] __warn+0x2e0/0x470 [ 107.294404][ C0] ? __rate_control_send_low+0x635/0x880 [ 107.300070][ C0] ? __rate_control_send_low+0x635/0x880 [ 107.305752][ C0] report_bug+0x2be/0x4f0 [ 107.310127][ C0] ? __rate_control_send_low+0x635/0x880 [ 107.315794][ C0] ? __rate_control_send_low+0x635/0x880 [ 107.321478][ C0] ? __rate_control_send_low+0x637/0x880 [ 107.327118][ C0] handle_bug+0xcf/0x120 [ 107.331383][ C0] exc_invalid_op+0x1a/0x50 [ 107.335901][ C0] asm_exc_invalid_op+0x1a/0x20 [ 107.340764][ C0] RIP: 0010:__rate_control_send_low+0x635/0x880 [ 107.346403][ T5101] Bluetooth: hci0: command tx timeout [ 107.352402][ C0] Code: 30 42 0f b6 04 28 84 c0 0f 85 e6 01 00 00 41 8b 0e 48 c7 c7 c0 87 be 8b 48 8b 74 24 10 44 8b 44 24 1c 45 89 e1 e8 db 6e 69 f7 <0f> 0b e9 78 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fa ff [ 107.372148][ C0] RSP: 0018:ffffc90000007560 EFLAGS: 00010246 [ 107.378240][ C0] RAX: 469c9f1d502d4000 RBX: 000000000000000c RCX: ffff888024330000 [ 107.386226][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 107.394210][ C0] RBP: 0000000000000084 R08: ffffc90000007167 R09: 1ffff92000000e2c [ 107.402202][ C0] R10: dffffc0000000000 R11: fffff52000000e2d R12: 0000000000000020 [ 107.410207][ C0] R13: dffffc0000000000 R14: ffff88807c77b358 R15: ffff888076ee3ca8 [ 107.418230][ C0] rate_control_send_low+0x194/0x790 [ 107.423549][ C0] rate_control_get_rate+0x20b/0x5c0 [ 107.428943][ C0] ieee80211_beacon_get_finish+0x38d/0x6b0 [ 107.434778][ C0] ? ieee80211_set_beacon_cntdwn+0x660/0x660 [ 107.440778][ C0] ? __local_bh_enable_ip+0x12e/0x1c0 [ 107.446169][ C0] ? _local_bh_enable+0xa0/0xa0 [ 107.451041][ C0] ieee80211_beacon_get_ap+0x1429/0x1970 [ 107.456738][ C0] ? ieee80211_tx_8023+0x3c0/0x3c0 [ 107.461880][ C0] ? read_lock_is_recursive+0x20/0x20 [ 107.467278][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 107.472853][ C0] __ieee80211_beacon_get+0x10eb/0x1600 [ 107.478425][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 107.483999][ C0] ieee80211_beacon_get_tim+0xb8/0x560 [ 107.489486][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 107.496274][ C0] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 107.501856][ C0] __iterate_interfaces+0x243/0x500 [ 107.507075][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 107.513347][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 107.520569][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 107.526833][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 107.533905][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 107.539131][ C0] __hrtimer_run_queues+0x51e/0xc40 [ 107.544359][ C0] ? hw_scan_work+0x1060/0x1060 [ 107.549241][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 107.554369][ C0] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 107.560464][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 107.565596][ C0] handle_softirqs+0x280/0x820 [ 107.570466][ C0] ? __irq_exit_rcu+0xc7/0x190 [ 107.575254][ C0] ? do_softirq+0x180/0x180 [ 107.579777][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 107.585003][ C0] __irq_exit_rcu+0xc7/0x190 [ 107.589612][ C0] ? irq_exit_rcu+0x20/0x20 [ 107.594138][ C0] irq_exit_rcu+0x9/0x20 [ 107.598405][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 107.604059][ C0] [ 107.607004][ C0] [ 107.609951][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 107.615951][ C0] RIP: 0010:preempt_count_add+0x84/0x1a0 [ 107.621608][ C0] Code: 83 3d cf 71 8f 15 00 75 11 65 8b 05 4e 57 a8 7e 0f b6 c0 3d f5 00 00 00 73 58 65 8b 05 3d 57 a8 7e 25 ff ff ff 7f 39 f8 75 42 <48> 8b 5c 24 18 48 89 df e8 ff d3 0c 00 85 c0 74 09 31 db 31 ff e8 [ 107.641420][ C0] RSP: 0018:ffffc90003307390 EFLAGS: 00000246 [ 107.647508][ C0] RAX: 0000000000000001 RBX: ffff888060a11b98 RCX: ffffffff96ead403 [ 107.655498][ C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000001 [ 107.663486][ C0] RBP: ffffc900033074b0 R08: ffff888060a11b9b R09: 1ffff1100c142373 [ 107.671473][ C0] R10: dffffc0000000000 R11: ffffed100c142374 R12: dffffc0000000000 [ 107.679463][ C0] R13: dffffc0000000000 R14: ffff888060a11b00 R15: dffffc0000000000 [ 107.687468][ C0] _raw_spin_lock+0x12/0x40 [ 107.692017][ C0] inode_wait_for_writeback+0x88/0x200 [ 107.697612][ C0] ? evict+0x451/0x870 [ 107.701708][ C0] ? sb_clear_inode_writeback+0x360/0x360 [ 107.707455][ C0] ? do_raw_spin_lock+0x121/0x2c0 [ 107.712501][ C0] ? __rwlock_init+0x150/0x150 [ 107.717286][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 107.722521][ C0] evict+0x459/0x870 [ 107.726624][ C0] ? __lock_acquire+0x7c80/0x7c80 [ 107.731683][ C0] ? proc_nr_inodes+0x230/0x230 [ 107.736563][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 107.741784][ C0] ? _raw_spin_unlock+0x28/0x40 [ 107.746652][ C0] ? iput+0x70a/0x920 [ 107.750659][ C0] __dentry_kill+0x431/0x650 [ 107.755271][ C0] shrink_dentry_list+0x39f/0x6a0 [ 107.760326][ C0] shrink_dcache_parent+0xac/0x3c0 [ 107.765471][ C0] ? write_sequnlock+0x30/0x30 [ 107.770259][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 107.775571][ C0] d_invalidate+0x11c/0x260 [ 107.780093][ C0] ? __rwlock_init+0x150/0x150 [ 107.784897][ C0] ? do_one_tree+0xe0/0xe0 [ 107.789350][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 107.794592][ C0] proc_invalidate_siblings_dcache+0x3d3/0x6c0 [ 107.800771][ C0] ? proc_invalidate_siblings_dcache+0x2b/0x6c0 [ 107.807037][ C0] release_task+0x145b/0x1610 [ 107.811742][ C0] ? wait_consider_task+0x1992/0x2ea0 [ 107.817157][ C0] ? delayed_put_task_struct+0x2b0/0x2b0 [ 107.822928][ C0] ? __rwlock_init+0x150/0x150 [ 107.827724][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 107.832950][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 107.838169][ C0] wait_consider_task+0x1992/0x2ea0 [ 107.843410][ C0] ? do_wait+0x2f8/0xaf0 [ 107.847677][ C0] ? child_wait_callback+0x230/0x230 [ 107.852989][ C0] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 107.858906][ C0] ? _raw_spin_unlock+0x40/0x40 [ 107.863773][ C0] ? add_wait_queue+0xba/0x170 [ 107.868572][ C0] do_wait+0x2f8/0xaf0 [ 107.872685][ C0] kernel_wait4+0x1af/0x270 [ 107.877215][ C0] ? __ia32_sys_waitid+0xc0/0xc0 [ 107.882179][ C0] ? restore_signal_shadow_stack+0x39d/0x460 [ 107.888205][ C0] ? kernel_waitid+0x360/0x360 [ 107.893001][ C0] __x64_sys_wait4+0x134/0x1e0 [ 107.897792][ C0] ? kernel_wait+0x170/0x170 [ 107.902418][ C0] ? lock_chain_count+0x20/0x20 [ 107.907294][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 107.912514][ C0] do_syscall_64+0x55/0xb0 [ 107.916956][ C0] ? clear_bhb_loop+0x40/0x90 [ 107.921652][ C0] ? clear_bhb_loop+0x40/0x90 [ 107.926355][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 107.932281][ C0] RIP: 0033:0x7f12dbb84b97 [ 107.936715][ C0] Code: 89 7c 24 10 48 89 4c 24 18 e8 45 1b 03 00 4c 8b 54 24 18 8b 54 24 14 41 89 c0 48 8b 74 24 08 8b 7c 24 10 b8 3d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 89 44 24 10 e8 95 1b 03 00 8b 44 [ 107.956352][ C0] RSP: 002b:00007fff52605250 EFLAGS: 00000293 ORIG_RAX: 000000000000003d [ 107.964793][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f12dbb84b97 [ 107.972806][ C0] RDX: 0000000040000001 RSI: 00007fff526052bc RDI: 00000000ffffffff [ 107.980808][ C0] RBP: 00007fff526052bc R08: 0000000000000000 R09: 0000000000000000 [ 107.988801][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 107.996786][ C0] R13: 00000000000927c0 R14: 0000000000019fd3 R15: 00007fff52605310 [ 108.004787][ C0] [ 108.008081][ C0] Kernel Offset: disabled [ 108.012473][ C0] Rebooting in 86400 seconds..