Warning: Permanently added '10.128.1.175' (ED25519) to the list of known hosts. 2025/07/14 01:19:34 ignoring optional flag "sandboxArg"="0" 2025/07/14 01:19:35 parsed 1 programs [ 91.553504][ T5793] cgroup: Unknown subsys name 'net' [ 91.721257][ T5793] cgroup: Unknown subsys name 'rlimit' [ 92.303347][ T55] cfg80211: failed to load regulatory.db [ 93.441825][ T5793] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 96.605311][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.616242][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.624295][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.634574][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.651800][ T50] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 96.659893][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.430112][ T5862] chnl_net:caif_netlink_parms(): no params data found [ 98.526859][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.535335][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.542871][ T5862] bridge_slave_0: entered allmulticast mode [ 98.550300][ T5862] bridge_slave_0: entered promiscuous mode [ 98.560129][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.568044][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.575612][ T5862] bridge_slave_1: entered allmulticast mode [ 98.582878][ T5862] bridge_slave_1: entered promiscuous mode [ 98.618773][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.632128][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.672870][ T5862] team0: Port device team_slave_0 added [ 98.683671][ T5862] team0: Port device team_slave_1 added [ 98.729737][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.737016][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.763899][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.776883][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.784053][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.810057][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.885492][ T5862] hsr_slave_0: entered promiscuous mode [ 98.896759][ T5862] hsr_slave_1: entered promiscuous mode [ 99.083670][ T5862] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 99.103932][ T5862] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 99.116016][ T5862] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 99.128504][ T5862] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 99.174710][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.182282][ T5862] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.190903][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.198408][ T5862] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.270656][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.299699][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.309631][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.342704][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.358144][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.365662][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.380340][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.387768][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.649400][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.715477][ T5862] veth0_vlan: entered promiscuous mode [ 99.734680][ T5862] veth1_vlan: entered promiscuous mode [ 99.767738][ T5862] veth0_macvtap: entered promiscuous mode [ 99.785582][ T5862] veth1_macvtap: entered promiscuous mode [ 99.807855][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.826619][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.839858][ T5862] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.849341][ T5862] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.859936][ T5862] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.869130][ T5862] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.029464][ T1024] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.581965][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.590596][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.648926][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.658770][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/07/14 01:19:48 executed programs: 0 [ 101.238238][ T5103] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 101.247732][ T5103] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 101.255818][ T5103] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 101.266822][ T5103] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 101.276039][ T5103] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 101.283506][ T5103] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 101.461904][ T5898] chnl_net:caif_netlink_parms(): no params data found [ 101.540446][ T5898] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.547927][ T5898] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.555714][ T5898] bridge_slave_0: entered allmulticast mode [ 101.563177][ T5898] bridge_slave_0: entered promiscuous mode [ 101.571395][ T5898] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.579218][ T5898] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.587812][ T5898] bridge_slave_1: entered allmulticast mode [ 101.597252][ T5898] bridge_slave_1: entered promiscuous mode [ 101.635593][ T5898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.648516][ T5898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.684313][ T5898] team0: Port device team_slave_0 added [ 101.694056][ T5898] team0: Port device team_slave_1 added [ 101.725267][ T5898] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.733107][ T5898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.759608][ T5898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.773286][ T5898] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.780529][ T5898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.806645][ T5898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.853139][ T5898] hsr_slave_0: entered promiscuous mode [ 101.859613][ T5898] hsr_slave_1: entered promiscuous mode [ 101.866723][ T5898] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.875138][ T5898] Cannot create hsr debugfs directory [ 102.735595][ T1024] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.342577][ T5103] Bluetooth: hci0: command tx timeout [ 105.022839][ T1024] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.107310][ T1024] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.433521][ T5103] Bluetooth: hci0: command tx timeout [ 106.029546][ T1024] hsr_slave_0: left promiscuous mode [ 106.039171][ T1024] hsr_slave_1: left promiscuous mode [ 106.046153][ T1024] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.056236][ T1024] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.067764][ T1024] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.078470][ T1024] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.087115][ T1024] bridge_slave_1: left allmulticast mode [ 106.095338][ T1024] bridge_slave_1: left promiscuous mode [ 106.102255][ T1024] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.120420][ T1024] bridge_slave_0: left allmulticast mode [ 106.127282][ T1024] bridge_slave_0: left promiscuous mode [ 106.133589][ T1024] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.170127][ T1024] veth1_macvtap: left promiscuous mode [ 106.179111][ T1024] veth0_macvtap: left promiscuous mode [ 106.185313][ T1024] veth1_vlan: left promiscuous mode [ 106.191814][ T1024] veth0_vlan: left promiscuous mode [ 106.660169][ T1024] team0 (unregistering): Port device team_slave_1 removed [ 106.697967][ T1024] team0 (unregistering): Port device team_slave_0 removed [ 106.735348][ T1024] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.771435][ T1024] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.114652][ T1024] bond0 (unregistering): Released all slaves [ 107.220729][ T5898] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 107.235109][ T5898] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 107.247156][ T5898] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 107.260713][ T5898] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 107.392597][ T5898] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.416147][ T5898] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.429263][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.436437][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.453016][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.460654][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.502671][ T5103] Bluetooth: hci0: command tx timeout [ 107.724749][ T5898] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.781385][ T5898] veth0_vlan: entered promiscuous mode [ 107.803575][ T5898] veth1_vlan: entered promiscuous mode [ 107.868293][ T5898] veth0_macvtap: entered promiscuous mode [ 107.894308][ T5898] veth1_macvtap: entered promiscuous mode [ 107.916858][ T5898] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.933402][ T5898] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.948655][ T5898] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.958992][ T5898] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.968109][ T5898] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.977299][ T5898] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.080660][ T4070] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.098814][ T4070] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.145012][ T4070] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.155058][ T4070] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.338874][ C0] ------------[ cut here ]------------ [ 108.344841][ C0] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0xfff with flags 0x20 [ 108.356123][ C0] WARNING: CPU: 0 PID: 5898 at net/mac80211/rate.c:385 __rate_control_send_low+0x635/0x880 [ 108.366249][ C0] Modules linked in: [ 108.370210][ C0] CPU: 0 PID: 5898 Comm: syz-executor Not tainted 6.6.97-syzkaller #0 [ 108.378525][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 108.388731][ C0] RIP: 0010:__rate_control_send_low+0x635/0x880 [ 108.395221][ C0] Code: 30 42 0f b6 04 28 84 c0 0f 85 e6 01 00 00 41 8b 0e 48 c7 c7 c0 87 be 8b 48 8b 74 24 10 44 8b 44 24 1c 45 89 e1 e8 db 6e 69 f7 <0f> 0b e9 78 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fa ff [ 108.416345][ C0] RSP: 0018:ffffc90000007560 EFLAGS: 00010246 [ 108.422538][ C0] RAX: 9a98af684f2da300 RBX: 000000000000000c RCX: ffff888027479e00 [ 108.430735][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 108.438823][ C0] RBP: 0000000000000084 R08: ffffc90000007167 R09: 1ffff92000000e2c [ 108.447356][ C0] R10: dffffc0000000000 R11: fffff52000000e2d R12: 0000000000000020 [ 108.455446][ C0] R13: dffffc0000000000 R14: ffff88802c94b358 R15: ffff88802419fa28 [ 108.463540][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 108.472878][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 108.479619][ C0] CR2: 000000c000ba6030 CR3: 000000000cb30000 CR4: 00000000003506f0 [ 108.487980][ C0] Call Trace: [ 108.491310][ C0] [ 108.494928][ C0] rate_control_send_low+0x194/0x790 [ 108.500455][ C0] rate_control_get_rate+0x20b/0x5c0 [ 108.506618][ C0] ieee80211_beacon_get_finish+0x38d/0x6b0 [ 108.512717][ C0] ? ieee80211_set_beacon_cntdwn+0x660/0x660 [ 108.518778][ C0] ? __local_bh_enable_ip+0x12e/0x1c0 [ 108.524391][ C0] ? _local_bh_enable+0xa0/0xa0 [ 108.529391][ C0] ieee80211_beacon_get_ap+0x1429/0x1970 [ 108.536588][ C0] ? ieee80211_tx_8023+0x3c0/0x3c0 [ 108.541937][ C0] ? read_lock_is_recursive+0x20/0x20 [ 108.547407][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 108.553196][ C0] __ieee80211_beacon_get+0x10eb/0x1600 [ 108.558990][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 108.564955][ C0] ieee80211_beacon_get_tim+0xb8/0x560 [ 108.570725][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 108.577652][ C0] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 108.583680][ C0] __iterate_interfaces+0x243/0x500 [ 108.589119][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 108.596055][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 108.603688][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 108.610133][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 108.617611][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 108.623334][ C0] __hrtimer_run_queues+0x51e/0xc40 [ 108.628610][ C0] ? hw_scan_work+0x1060/0x1060 [ 108.634072][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 108.640937][ C0] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 108.647253][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 108.654749][ C0] handle_softirqs+0x280/0x820 [ 108.660153][ C0] ? __irq_exit_rcu+0xc7/0x190 [ 108.666660][ C0] ? do_softirq+0x180/0x180 [ 108.671731][ C0] __irq_exit_rcu+0xc7/0x190 [ 108.676537][ C0] ? irq_exit_rcu+0x20/0x20 [ 108.681128][ C0] irq_exit_rcu+0x9/0x20 [ 108.686249][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 108.692305][ C0] [ 108.695301][ C0] [ 108.698276][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 108.705107][ C0] RIP: 0010:memset_orig+0x70/0xac [ 108.710293][ C0] Code: 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d8 0f 1f 84 00 00 00 00 00 89 d1 83 e1 38 74 14 c1 e9 03 66 0f 1f 44 00 00 c9 48 89 07 48 8d 7f 08 75 f5 83 e2 07 74 0a ff ca 88 07 48 8d [ 108.734118][ C0] RSP: 0018:ffffc90002e576f8 EFLAGS: 00000206 [ 108.740243][ C0] RAX: fbfbfbfbfbfbfbfb RBX: ffff888029db1a00 RCX: 0000000000000003 [ 108.748628][ C0] RDX: 000000000000001e RSI: 00000000000000fb RDI: ffffed10053b6340 [ 108.756748][ C0] RBP: 0000000000000001 R08: dffffc0000000000 R09: 0000000000000000 [ 108.764911][ C0] R10: ffffed10053b6340 R11: fffffbfff21b4cc1 R12: 0000000000000000 [ 108.773013][ C0] R13: ffffc90002e57790 R14: ffff88801d242000 R15: ffffffff81dd75a8 [ 108.781423][ C0] ? kmem_cache_free+0xf8/0x280 [ 108.786707][ C0] ? kmem_cache_free+0xf8/0x280 [ 108.791743][ C0] ____kasan_slab_free+0x112/0x1e0 [ 108.796933][ C0] slab_free_freelist_hook+0x130/0x1b0 [ 108.802522][ C0] ? mgmt_send_event_skb+0x2b2/0x460 [ 108.807872][ C0] kmem_cache_free+0xf8/0x280 [ 108.812693][ C0] mgmt_send_event_skb+0x2b2/0x460 [ 108.817861][ C0] mgmt_index_removed+0x186/0x2f0 [ 108.823009][ C0] ? hci_unregister_dev+0x2e7/0x510 [ 108.828446][ C0] ? mgmt_index_added+0x1f0/0x1f0 [ 108.833693][ C0] ? hci_dev_open_sync+0x2b50/0x2b50 [ 108.839046][ C0] hci_unregister_dev+0x2ef/0x510 [ 108.844206][ C0] vhci_release+0x83/0xd0 [ 108.848614][ C0] ? vhci_open+0x360/0x360 [ 108.853446][ C0] __fput+0x234/0x970 [ 108.857621][ C0] task_work_run+0x1ce/0x250 [ 108.862441][ C0] ? task_work_cancel+0x240/0x240 [ 108.867623][ C0] ? do_exit+0x906/0x23c0 [ 108.872083][ C0] ? kmem_cache_free+0xf8/0x280 [ 108.877006][ C0] do_exit+0x90b/0x23c0 [ 108.881253][ C0] ? put_task_struct+0xc0/0xc0 [ 108.886157][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 108.892253][ C0] ? get_signal+0x1068/0x1400 [ 108.897023][ C0] ? lock_chain_count+0x20/0x20 [ 108.901999][ C0] ? _raw_spin_lock_irq+0xaf/0xe0 [ 108.907084][ C0] do_group_exit+0x21b/0x2d0 [ 108.912060][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 108.917315][ C0] get_signal+0x12fc/0x1400 [ 108.921986][ C0] arch_do_signal_or_restart+0x96/0x780 [ 108.927603][ C0] ? __lock_acquire+0x7c80/0x7c80 [ 108.932757][ C0] ? get_sigframe_size+0x20/0x20 [ 108.937766][ C0] ? fd_install+0x60/0x4e0 [ 108.942302][ C0] ? exit_to_user_mode_loop+0x3b/0x110 [ 108.947819][ C0] exit_to_user_mode_loop+0x70/0x110 [ 108.953222][ C0] exit_to_user_mode_prepare+0xb1/0x140 [ 108.958844][ C0] syscall_exit_to_user_mode+0x1a/0x50 [ 108.964402][ C0] do_syscall_64+0x61/0xb0 [ 108.968875][ C0] ? clear_bhb_loop+0x40/0x90 [ 108.973675][ C0] ? clear_bhb_loop+0x40/0x90 [ 108.978528][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 108.984540][ C0] RIP: 0033:0x7f88ea590847 [ 108.989020][ C0] Code: Unable to access opcode bytes at 0x7f88ea59081d. [ 108.996238][ C0] RSP: 002b:00007ffced2524c8 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 109.005381][ C0] RAX: 0000000000000003 RBX: 0000000000000003 RCX: 00007f88ea590847 [ 109.013475][ C0] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 109.022255][ C0] RBP: 00007ffced252bfc R08: 00007ffced25251c R09: 00007ffced252907 [ 109.030369][ C0] R10: 00007ffced252570 R11: 0000000000000202 R12: 00007f88ea782e40 [ 109.038555][ C0] R13: 00000000000927c0 R14: 000000000001a68f R15: 00007f88ea785000 [ 109.046740][ C0] [ 109.049980][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 109.057307][ C0] CPU: 0 PID: 5898 Comm: syz-executor Not tainted 6.6.97-syzkaller #0 [ 109.065608][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 109.075886][ C0] Call Trace: [ 109.079209][ C0] [ 109.082084][ C0] dump_stack_lvl+0x16c/0x230 [ 109.086896][ C0] ? show_regs_print_info+0x20/0x20 [ 109.092149][ C0] ? load_image+0x3b0/0x3b0 [ 109.096882][ C0] panic+0x2c0/0x710 [ 109.101173][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 109.105836][ C0] __warn+0x2e0/0x470 [ 109.109867][ C0] ? __rate_control_send_low+0x635/0x880 [ 109.115664][ C0] ? __rate_control_send_low+0x635/0x880 [ 109.121517][ C0] report_bug+0x2be/0x4f0 [ 109.125984][ C0] ? __rate_control_send_low+0x635/0x880 [ 109.131921][ C0] ? __rate_control_send_low+0x635/0x880 [ 109.137686][ C0] ? __rate_control_send_low+0x637/0x880 [ 109.143362][ C0] handle_bug+0xcf/0x120 [ 109.148374][ C0] exc_invalid_op+0x1a/0x50 [ 109.153029][ C0] asm_exc_invalid_op+0x1a/0x20 [ 109.157925][ C0] RIP: 0010:__rate_control_send_low+0x635/0x880 [ 109.164236][ C0] Code: 30 42 0f b6 04 28 84 c0 0f 85 e6 01 00 00 41 8b 0e 48 c7 c7 c0 87 be 8b 48 8b 74 24 10 44 8b 44 24 1c 45 89 e1 e8 db 6e 69 f7 <0f> 0b e9 78 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fa ff [ 109.184144][ C0] RSP: 0018:ffffc90000007560 EFLAGS: 00010246 [ 109.190237][ C0] RAX: 9a98af684f2da300 RBX: 000000000000000c RCX: ffff888027479e00 [ 109.198252][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 109.206248][ C0] RBP: 0000000000000084 R08: ffffc90000007167 R09: 1ffff92000000e2c [ 109.214235][ C0] R10: dffffc0000000000 R11: fffff52000000e2d R12: 0000000000000020 [ 109.222266][ C0] R13: dffffc0000000000 R14: ffff88802c94b358 R15: ffff88802419fa28 [ 109.230478][ C0] rate_control_send_low+0x194/0x790 [ 109.235936][ C0] rate_control_get_rate+0x20b/0x5c0 [ 109.241243][ C0] ieee80211_beacon_get_finish+0x38d/0x6b0 [ 109.247336][ C0] ? ieee80211_set_beacon_cntdwn+0x660/0x660 [ 109.253507][ C0] ? __local_bh_enable_ip+0x12e/0x1c0 [ 109.258897][ C0] ? _local_bh_enable+0xa0/0xa0 [ 109.263773][ C0] ieee80211_beacon_get_ap+0x1429/0x1970 [ 109.269436][ C0] ? ieee80211_tx_8023+0x3c0/0x3c0 [ 109.274614][ C0] ? read_lock_is_recursive+0x20/0x20 [ 109.280100][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 109.285687][ C0] __ieee80211_beacon_get+0x10eb/0x1600 [ 109.291277][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 109.296956][ C0] ieee80211_beacon_get_tim+0xb8/0x560 [ 109.302530][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 109.309326][ C0] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 109.314990][ C0] __iterate_interfaces+0x243/0x500 [ 109.320215][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 109.326478][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 109.333706][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 109.339965][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 109.347012][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 109.352231][ C0] __hrtimer_run_queues+0x51e/0xc40 [ 109.357456][ C0] ? hw_scan_work+0x1060/0x1060 [ 109.362349][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 109.367486][ C0] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 109.373725][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 109.378859][ C0] handle_softirqs+0x280/0x820 [ 109.383643][ C0] ? __irq_exit_rcu+0xc7/0x190 [ 109.388431][ C0] ? do_softirq+0x180/0x180 [ 109.392989][ C0] __irq_exit_rcu+0xc7/0x190 [ 109.397590][ C0] ? irq_exit_rcu+0x20/0x20 [ 109.402111][ C0] irq_exit_rcu+0x9/0x20 [ 109.406391][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 109.412045][ C0] [ 109.414985][ C0] [ 109.417925][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 109.424008][ C0] RIP: 0010:memset_orig+0x70/0xac [ 109.429050][ C0] Code: 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d8 0f 1f 84 00 00 00 00 00 89 d1 83 e1 38 74 14 c1 e9 03 66 0f 1f 44 00 00 c9 48 89 07 48 8d 7f 08 75 f5 83 e2 07 74 0a ff ca 88 07 48 8d [ 109.448881][ C0] RSP: 0018:ffffc90002e576f8 EFLAGS: 00000206 [ 109.455583][ C0] RAX: fbfbfbfbfbfbfbfb RBX: ffff888029db1a00 RCX: 0000000000000003 [ 109.463841][ C0] RDX: 000000000000001e RSI: 00000000000000fb RDI: ffffed10053b6340 [ 109.471832][ C0] RBP: 0000000000000001 R08: dffffc0000000000 R09: 0000000000000000 [ 109.480004][ C0] R10: ffffed10053b6340 R11: fffffbfff21b4cc1 R12: 0000000000000000 [ 109.488182][ C0] R13: ffffc90002e57790 R14: ffff88801d242000 R15: ffffffff81dd75a8 [ 109.496168][ C0] ? kmem_cache_free+0xf8/0x280 [ 109.501049][ C0] ? kmem_cache_free+0xf8/0x280 [ 109.505927][ C0] ____kasan_slab_free+0x112/0x1e0 [ 109.511061][ C0] slab_free_freelist_hook+0x130/0x1b0 [ 109.516540][ C0] ? mgmt_send_event_skb+0x2b2/0x460 [ 109.521836][ C0] kmem_cache_free+0xf8/0x280 [ 109.526527][ C0] mgmt_send_event_skb+0x2b2/0x460 [ 109.531660][ C0] mgmt_index_removed+0x186/0x2f0 [ 109.536708][ C0] ? hci_unregister_dev+0x2e7/0x510 [ 109.541929][ C0] ? mgmt_index_added+0x1f0/0x1f0 [ 109.546972][ C0] ? hci_dev_open_sync+0x2b50/0x2b50 [ 109.552379][ C0] hci_unregister_dev+0x2ef/0x510 [ 109.557435][ C0] vhci_release+0x83/0xd0 [ 109.561783][ C0] ? vhci_open+0x360/0x360 [ 109.566219][ C0] __fput+0x234/0x970 [ 109.570227][ C0] task_work_run+0x1ce/0x250 [ 109.574867][ C0] ? task_work_cancel+0x240/0x240 [ 109.580203][ C0] ? do_exit+0x906/0x23c0 [ 109.584605][ C0] ? kmem_cache_free+0xf8/0x280 [ 109.589513][ C0] do_exit+0x90b/0x23c0 [ 109.593714][ C0] ? put_task_struct+0xc0/0xc0 [ 109.598535][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 109.604652][ C0] ? get_signal+0x1068/0x1400 [ 109.609541][ C0] ? lock_chain_count+0x20/0x20 [ 109.614456][ C0] ? _raw_spin_lock_irq+0xaf/0xe0 [ 109.619749][ C0] do_group_exit+0x21b/0x2d0 [ 109.624383][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 109.629690][ C0] get_signal+0x12fc/0x1400 [ 109.634498][ C0] arch_do_signal_or_restart+0x96/0x780 [ 109.640068][ C0] ? __lock_acquire+0x7c80/0x7c80 [ 109.645114][ C0] ? get_sigframe_size+0x20/0x20 [ 109.650077][ C0] ? fd_install+0x60/0x4e0 [ 109.654528][ C0] ? exit_to_user_mode_loop+0x3b/0x110 [ 109.660010][ C0] exit_to_user_mode_loop+0x70/0x110 [ 109.665312][ C0] exit_to_user_mode_prepare+0xb1/0x140 [ 109.670889][ C0] syscall_exit_to_user_mode+0x1a/0x50 [ 109.676371][ C0] do_syscall_64+0x61/0xb0 [ 109.680815][ C0] ? clear_bhb_loop+0x40/0x90 [ 109.685506][ C0] ? clear_bhb_loop+0x40/0x90 [ 109.690200][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 109.696193][ C0] RIP: 0033:0x7f88ea590847 [ 109.700619][ C0] Code: Unable to access opcode bytes at 0x7f88ea59081d. [ 109.707728][ C0] RSP: 002b:00007ffced2524c8 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 109.716155][ C0] RAX: 0000000000000003 RBX: 0000000000000003 RCX: 00007f88ea590847 [ 109.724138][ C0] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 109.732121][ C0] RBP: 00007ffced252bfc R08: 00007ffced25251c R09: 00007ffced252907 [ 109.740119][ C0] R10: 00007ffced252570 R11: 0000000000000202 R12: 00007f88ea782e40 [ 109.748127][ C0] R13: 00000000000927c0 R14: 000000000001a68f R15: 00007f88ea785000 [ 109.756138][ C0] [ 109.759472][ C0] Kernel Offset: disabled [ 109.763833][ C0] Rebooting in 86400 seconds..