Warning: Permanently added '10.128.0.153' (ED25519) to the list of known hosts. 2025/07/14 03:51:56 ignoring optional flag "sandboxArg"="0" 2025/07/14 03:51:57 parsed 1 programs [ 92.277451][ T1203] cfg80211: failed to load regulatory.db [ 93.547480][ T5797] cgroup: Unknown subsys name 'net' [ 93.684870][ T5797] cgroup: Unknown subsys name 'rlimit' [ 95.387047][ T5797] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 98.038566][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 98.131838][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.139833][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.151284][ T5819] bridge_slave_0: entered allmulticast mode [ 98.159604][ T5819] bridge_slave_0: entered promiscuous mode [ 98.169416][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.176649][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.183827][ T5819] bridge_slave_1: entered allmulticast mode [ 98.191159][ T5819] bridge_slave_1: entered promiscuous mode [ 98.232646][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.244645][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.288699][ T5819] team0: Port device team_slave_0 added [ 98.298018][ T5819] team0: Port device team_slave_1 added [ 98.327178][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.334187][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.360297][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.373356][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.380679][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.406683][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.458858][ T5819] hsr_slave_0: entered promiscuous mode [ 98.465913][ T5819] hsr_slave_1: entered promiscuous mode [ 98.645821][ T5819] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 98.658361][ T5819] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 98.670429][ T5819] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 98.682844][ T5819] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 98.722511][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.729834][ T5819] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.738053][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.745296][ T5819] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.824522][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.851459][ T1074] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.861593][ T1074] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.880248][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.899736][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.906942][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.927615][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.934788][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.140636][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.186624][ T5819] veth0_vlan: entered promiscuous mode [ 99.199645][ T5819] veth1_vlan: entered promiscuous mode [ 99.232327][ T5819] veth0_macvtap: entered promiscuous mode [ 99.244092][ T5819] veth1_macvtap: entered promiscuous mode [ 99.263957][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.280671][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.293304][ T5819] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.303270][ T5819] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.312290][ T5819] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.322739][ T5819] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.491844][ T2916] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.905490][ T5867] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 100.914071][ T5867] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 100.924504][ T5867] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 100.933550][ T5867] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 100.941661][ T5867] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 100.949853][ T5867] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 101.956949][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.965344][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.996296][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.004189][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.037453][ T2916] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2025/07/14 03:52:09 executed programs: 0 [ 102.509682][ T5103] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 102.519736][ T5103] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 102.530481][ T5103] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 102.539294][ T5103] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 102.548078][ T5103] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 102.555739][ T5103] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 102.725928][ T5894] chnl_net:caif_netlink_parms(): no params data found [ 102.798904][ T5894] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.806374][ T5894] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.813677][ T5894] bridge_slave_0: entered allmulticast mode [ 102.821392][ T5894] bridge_slave_0: entered promiscuous mode [ 102.829680][ T5894] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.837492][ T5894] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.844687][ T5894] bridge_slave_1: entered allmulticast mode [ 102.852701][ T5894] bridge_slave_1: entered promiscuous mode [ 102.885919][ T5894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.897973][ T5894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.933690][ T5894] team0: Port device team_slave_0 added [ 102.942760][ T5894] team0: Port device team_slave_1 added [ 102.974571][ T5894] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.981710][ T5894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.007900][ T5894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.020161][ T5894] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.027249][ T5894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.053290][ T5894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.099419][ T5894] hsr_slave_0: entered promiscuous mode [ 103.106211][ T5894] hsr_slave_1: entered promiscuous mode [ 103.112463][ T5894] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 103.120671][ T5894] Cannot create hsr debugfs directory [ 104.527202][ T2916] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.599570][ T5103] Bluetooth: hci0: command tx timeout [ 104.617295][ T2916] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.591801][ T2916] hsr_slave_0: left promiscuous mode [ 105.602418][ T2916] hsr_slave_1: left promiscuous mode [ 105.609360][ T2916] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.619309][ T2916] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.629223][ T2916] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.640583][ T2916] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.649103][ T2916] bridge_slave_1: left allmulticast mode [ 105.654814][ T2916] bridge_slave_1: left promiscuous mode [ 105.662291][ T2916] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.677508][ T2916] bridge_slave_0: left allmulticast mode [ 105.683230][ T2916] bridge_slave_0: left promiscuous mode [ 105.689707][ T2916] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.723764][ T2916] veth1_macvtap: left promiscuous mode [ 105.733174][ T2916] veth0_macvtap: left promiscuous mode [ 105.739908][ T2916] veth1_vlan: left promiscuous mode [ 105.745623][ T2916] veth0_vlan: left promiscuous mode [ 106.167357][ T2916] team0 (unregistering): Port device team_slave_1 removed [ 106.203353][ T2916] team0 (unregistering): Port device team_slave_0 removed [ 106.236403][ T2916] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.270138][ T2916] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.586491][ T2916] bond0 (unregistering): Released all slaves [ 106.677653][ T5103] Bluetooth: hci0: command tx timeout [ 106.689711][ T5894] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 106.699734][ T5894] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 106.711741][ T5894] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 106.723475][ T5894] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 106.833851][ T5894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.874560][ T5894] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.888109][ T1074] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.895320][ T1074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.919070][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.926319][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.205633][ T5894] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.287497][ T5894] veth0_vlan: entered promiscuous mode [ 107.319180][ T5894] veth1_vlan: entered promiscuous mode [ 107.369540][ T5894] veth0_macvtap: entered promiscuous mode [ 107.379827][ T5894] veth1_macvtap: entered promiscuous mode [ 107.399522][ T5894] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.413857][ T5894] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.427674][ T5894] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.436772][ T5894] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.445594][ T5894] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.454352][ T5894] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.526471][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.535363][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.567270][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.575880][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.780779][ C1] ------------[ cut here ]------------ [ 107.786673][ C1] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0xfff with flags 0x20 [ 107.797747][ C1] WARNING: CPU: 1 PID: 5794 at net/mac80211/rate.c:385 __rate_control_send_low+0x635/0x880 [ 107.807845][ C1] Modules linked in: [ 107.811818][ C1] CPU: 1 PID: 5794 Comm: syz-execprog Not tainted 6.6.97-syzkaller #0 [ 107.820074][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 107.830215][ C1] RIP: 0010:__rate_control_send_low+0x635/0x880 [ 107.836564][ C1] Code: 30 42 0f b6 04 28 84 c0 0f 85 e6 01 00 00 41 8b 0e 48 c7 c7 c0 87 be 8b 48 8b 74 24 10 44 8b 44 24 1c 45 89 e1 e8 db 6e 69 f7 <0f> 0b e9 78 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fa ff [ 107.856282][ C1] RSP: 0018:ffffc900001f0560 EFLAGS: 00010246 [ 107.862391][ C1] RAX: 12cae463b0ff2e00 RBX: 000000000000000c RCX: ffff8880770e3c00 [ 107.870430][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 107.878467][ C1] RBP: 0000000000000084 R08: ffffc900001f0167 R09: 1ffff9200003e02c [ 107.886517][ C1] R10: dffffc0000000000 R11: fffff5200003e02d R12: 0000000000000020 [ 107.894526][ C1] R13: dffffc0000000000 R14: ffff88802c41b358 R15: ffff888076eaade8 [ 107.902564][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 107.911559][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 107.918201][ C1] CR2: 000000c00003e720 CR3: 0000000018ed3000 CR4: 00000000003506e0 [ 107.926257][ C1] Call Trace: [ 107.929577][ C1] [ 107.932480][ C1] rate_control_send_low+0x194/0x790 [ 107.937846][ C1] rate_control_get_rate+0x20b/0x5c0 [ 107.943213][ C1] ieee80211_beacon_get_finish+0x38d/0x6b0 [ 107.949294][ C1] ? ieee80211_set_beacon_cntdwn+0x660/0x660 [ 107.955422][ C1] ? __local_bh_enable_ip+0x12e/0x1c0 [ 107.960818][ C1] ? _local_bh_enable+0xa0/0xa0 [ 107.965783][ C1] ieee80211_beacon_get_ap+0x1429/0x1970 [ 107.971471][ C1] ? ieee80211_tx_8023+0x3c0/0x3c0 [ 107.976655][ C1] ? read_lock_is_recursive+0x20/0x20 [ 107.982072][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 107.987681][ C1] __ieee80211_beacon_get+0x10eb/0x1600 [ 107.993269][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 107.998929][ C1] ieee80211_beacon_get_tim+0xb8/0x560 [ 108.004431][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 108.011269][ C1] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 108.016896][ C1] __iterate_interfaces+0x243/0x500 [ 108.022116][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 108.028420][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 108.035719][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 108.041995][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 108.049114][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 108.054378][ C1] __hrtimer_run_queues+0x51e/0xc40 [ 108.059681][ C1] ? hw_scan_work+0x1060/0x1060 [ 108.064590][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 108.069765][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 108.075906][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 108.081059][ C1] handle_softirqs+0x280/0x820 [ 108.085911][ C1] ? __irq_exit_rcu+0xc7/0x190 [ 108.090716][ C1] ? do_softirq+0x180/0x180 [ 108.095282][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 108.100524][ C1] __irq_exit_rcu+0xc7/0x190 [ 108.105188][ C1] ? irq_exit_rcu+0x20/0x20 [ 108.109730][ C1] irq_exit_rcu+0x9/0x20 [ 108.113981][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 108.119680][ C1] [ 108.122640][ C1] [ 108.125645][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 108.131665][ C1] RIP: 0010:lock_acquire+0xd3/0x410 [ 108.136925][ C1] Code: 06 48 8d 3c c5 e8 92 4a 8e be 08 00 00 00 e8 a4 4d 77 00 4c 0f a3 35 74 99 e3 0c 73 0d e8 e5 96 08 00 84 c0 0f 84 18 02 00 00 <48> c7 c0 9c c7 4a 8e 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 07 02 [ 108.156599][ C1] RSP: 0018:ffffc9000468f320 EFLAGS: 00000202 [ 108.162691][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 12cae463b0ff2e00 [ 108.170748][ C1] RDX: 0000000000000000 RSI: ffffffff8afc7860 RDI: ffffffff8afc7820 [ 108.178807][ C1] RBP: ffffc9000468f430 R08: ffffffff8e4a92ef R09: 1ffffffff1c9525d [ 108.186886][ C1] R10: dffffc0000000000 R11: fffffbfff1c9525e R12: 1ffff920008d1e70 [ 108.194905][ C1] R13: ffffffff8cd2fb20 R14: 0000000000000001 R15: dffffc0000000000 [ 108.203001][ C1] ? read_lock_is_recursive+0x20/0x20 [ 108.208442][ C1] ? __mod_lruvec_page_state+0xa5/0x420 [ 108.214038][ C1] ? __lock_acquire+0x7c80/0x7c80 [ 108.219140][ C1] ? __mod_lruvec_page_state+0xa5/0x420 [ 108.224727][ C1] ? pfn_valid+0xcd/0x420 [ 108.229125][ C1] pfn_valid+0xe9/0x420 [ 108.233348][ C1] ? pfn_valid+0xcd/0x420 [ 108.237774][ C1] page_table_check_clear+0x1e/0x6a0 [ 108.243119][ C1] ? __page_table_check_pte_clear+0x43/0x70 [ 108.249090][ C1] unmap_page_range+0x1ad1/0x2fe0 [ 108.254181][ C1] ? copy_page_range+0x3600/0x3600 [ 108.259379][ C1] ? unmap_single_vma+0x1b0/0x2a0 [ 108.264447][ C1] unmap_vmas+0x25e/0x3a0 [ 108.268842][ C1] ? unmap_page_range+0x2fe0/0x2fe0 [ 108.274081][ C1] ? __lock_acquire+0x7c80/0x7c80 [ 108.279194][ C1] exit_mmap+0x200/0xb50 [ 108.283495][ C1] ? exit_mm_release+0x1a/0x30 [ 108.288418][ C1] ? vm_brk+0x30/0x30 [ 108.292443][ C1] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 108.298195][ C1] ? uprobe_clear_state+0x278/0x290 [ 108.303458][ C1] ? mm_update_next_owner+0x562/0x6c0 [ 108.308917][ C1] __mmput+0x118/0x3c0 [ 108.313021][ C1] exit_mm+0x1da/0x2c0 [ 108.317154][ C1] ? do_exit+0x23c0/0x23c0 [ 108.321614][ C1] ? taskstats_exit+0x35e/0x9e0 [ 108.326537][ C1] do_exit+0x88e/0x23c0 [ 108.330745][ C1] ? put_task_struct+0xc0/0xc0 [ 108.335586][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 108.341603][ C1] ? get_signal+0x1068/0x1400 [ 108.346451][ C1] ? lock_chain_count+0x20/0x20 [ 108.351448][ C1] ? _raw_spin_lock_irq+0xaf/0xe0 [ 108.356549][ C1] do_group_exit+0x21b/0x2d0 [ 108.361192][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 108.366466][ C1] get_signal+0x12fc/0x1400 [ 108.371041][ C1] arch_do_signal_or_restart+0x96/0x780 [ 108.376663][ C1] ? get_sigframe_size+0x20/0x20 [ 108.381662][ C1] ? exit_to_user_mode_loop+0x3b/0x110 [ 108.387194][ C1] exit_to_user_mode_loop+0x70/0x110 [ 108.392539][ C1] exit_to_user_mode_prepare+0xb1/0x140 [ 108.398155][ C1] syscall_exit_to_user_mode+0x1a/0x50 [ 108.403652][ C1] do_syscall_64+0x61/0xb0 [ 108.408140][ C1] ? clear_bhb_loop+0x40/0x90 [ 108.412871][ C1] ? clear_bhb_loop+0x40/0x90 [ 108.417654][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 108.423629][ C1] RIP: 0033:0x480143 [ 108.427604][ C1] Code: Unable to access opcode bytes at 0x480119. [ 108.434126][ C1] RSP: 002b:000000c004009ef0 EFLAGS: 00000286 ORIG_RAX: 00000000000000ca [ 108.442601][ C1] RAX: fffffffffffffe00 RBX: 0000000000000000 RCX: 0000000000480143 [ 108.450640][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000318d078 [ 108.458666][ C1] RBP: 000000c004009f38 R08: 0000000000000000 R09: 0000000000000000 [ 108.466697][ C1] R10: 0000000000000000 R11: 0000000000000286 R12: 000000000047c3c0 [ 108.474681][ C1] R13: 000000c00179c808 R14: 000000c004000000 R15: 0000000000000003 [ 108.482730][ C1] [ 108.485829][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 108.493147][ C1] CPU: 1 PID: 5794 Comm: syz-execprog Not tainted 6.6.97-syzkaller #0 [ 108.501319][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 108.511398][ C1] Call Trace: [ 108.514716][ C1] [ 108.517570][ C1] dump_stack_lvl+0x16c/0x230 [ 108.522268][ C1] ? show_regs_print_info+0x20/0x20 [ 108.527485][ C1] ? load_image+0x3b0/0x3b0 [ 108.532021][ C1] panic+0x2c0/0x710 [ 108.535943][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 108.540472][ C1] __warn+0x2e0/0x470 [ 108.544482][ C1] ? __rate_control_send_low+0x635/0x880 [ 108.550131][ C1] ? __rate_control_send_low+0x635/0x880 [ 108.555787][ C1] report_bug+0x2be/0x4f0 [ 108.560136][ C1] ? __rate_control_send_low+0x635/0x880 [ 108.565795][ C1] ? __rate_control_send_low+0x635/0x880 [ 108.571460][ C1] ? __rate_control_send_low+0x637/0x880 [ 108.577112][ C1] handle_bug+0xcf/0x120 [ 108.581379][ C1] exc_invalid_op+0x1a/0x50 [ 108.585905][ C1] asm_exc_invalid_op+0x1a/0x20 [ 108.590778][ C1] RIP: 0010:__rate_control_send_low+0x635/0x880 [ 108.597041][ C1] Code: 30 42 0f b6 04 28 84 c0 0f 85 e6 01 00 00 41 8b 0e 48 c7 c7 c0 87 be 8b 48 8b 74 24 10 44 8b 44 24 1c 45 89 e1 e8 db 6e 69 f7 <0f> 0b e9 78 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fa ff [ 108.616675][ C1] RSP: 0018:ffffc900001f0560 EFLAGS: 00010246 [ 108.622776][ C1] RAX: 12cae463b0ff2e00 RBX: 000000000000000c RCX: ffff8880770e3c00 [ 108.630775][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 108.638774][ C1] RBP: 0000000000000084 R08: ffffc900001f0167 R09: 1ffff9200003e02c [ 108.646773][ C1] R10: dffffc0000000000 R11: fffff5200003e02d R12: 0000000000000020 [ 108.654764][ C1] R13: dffffc0000000000 R14: ffff88802c41b358 R15: ffff888076eaade8 [ 108.662792][ C1] rate_control_send_low+0x194/0x790 [ 108.668106][ C1] rate_control_get_rate+0x20b/0x5c0 [ 108.673415][ C1] ieee80211_beacon_get_finish+0x38d/0x6b0 [ 108.679249][ C1] ? ieee80211_set_beacon_cntdwn+0x660/0x660 [ 108.685262][ C1] ? __local_bh_enable_ip+0x12e/0x1c0 [ 108.690653][ C1] ? _local_bh_enable+0xa0/0xa0 [ 108.695523][ C1] ieee80211_beacon_get_ap+0x1429/0x1970 [ 108.701188][ C1] ? ieee80211_tx_8023+0x3c0/0x3c0 [ 108.706329][ C1] ? read_lock_is_recursive+0x20/0x20 [ 108.711726][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 108.717297][ C1] __ieee80211_beacon_get+0x10eb/0x1600 [ 108.722861][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 108.728427][ C1] ieee80211_beacon_get_tim+0xb8/0x560 [ 108.733931][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 108.740735][ C1] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 108.746319][ C1] __iterate_interfaces+0x243/0x500 [ 108.751544][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 108.757815][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 108.765039][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 108.771300][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 108.778354][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 108.783573][ C1] __hrtimer_run_queues+0x51e/0xc40 [ 108.788798][ C1] ? hw_scan_work+0x1060/0x1060 [ 108.793677][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 108.798911][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 108.805010][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 108.810145][ C1] handle_softirqs+0x280/0x820 [ 108.814932][ C1] ? __irq_exit_rcu+0xc7/0x190 [ 108.819720][ C1] ? do_softirq+0x180/0x180 [ 108.824240][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 108.829463][ C1] __irq_exit_rcu+0xc7/0x190 [ 108.834072][ C1] ? irq_exit_rcu+0x20/0x20 [ 108.838599][ C1] irq_exit_rcu+0x9/0x20 [ 108.842850][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 108.848509][ C1] [ 108.851459][ C1] [ 108.854407][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 108.860405][ C1] RIP: 0010:lock_acquire+0xd3/0x410 [ 108.865645][ C1] Code: 06 48 8d 3c c5 e8 92 4a 8e be 08 00 00 00 e8 a4 4d 77 00 4c 0f a3 35 74 99 e3 0c 73 0d e8 e5 96 08 00 84 c0 0f 84 18 02 00 00 <48> c7 c0 9c c7 4a 8e 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 07 02 [ 108.885267][ C1] RSP: 0018:ffffc9000468f320 EFLAGS: 00000202 [ 108.891350][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 12cae463b0ff2e00 [ 108.899333][ C1] RDX: 0000000000000000 RSI: ffffffff8afc7860 RDI: ffffffff8afc7820 [ 108.907319][ C1] RBP: ffffc9000468f430 R08: ffffffff8e4a92ef R09: 1ffffffff1c9525d [ 108.915303][ C1] R10: dffffc0000000000 R11: fffffbfff1c9525e R12: 1ffff920008d1e70 [ 108.923304][ C1] R13: ffffffff8cd2fb20 R14: 0000000000000001 R15: dffffc0000000000 [ 108.931311][ C1] ? read_lock_is_recursive+0x20/0x20 [ 108.936703][ C1] ? __mod_lruvec_page_state+0xa5/0x420 [ 108.942290][ C1] ? __lock_acquire+0x7c80/0x7c80 [ 108.947347][ C1] ? __mod_lruvec_page_state+0xa5/0x420 [ 108.952909][ C1] ? pfn_valid+0xcd/0x420 [ 108.957263][ C1] pfn_valid+0xe9/0x420 [ 108.961444][ C1] ? pfn_valid+0xcd/0x420 [ 108.965801][ C1] page_table_check_clear+0x1e/0x6a0 [ 108.971107][ C1] ? __page_table_check_pte_clear+0x43/0x70 [ 108.977025][ C1] unmap_page_range+0x1ad1/0x2fe0 [ 108.982093][ C1] ? copy_page_range+0x3600/0x3600 [ 108.987224][ C1] ? unmap_single_vma+0x1b0/0x2a0 [ 108.992280][ C1] unmap_vmas+0x25e/0x3a0 [ 108.996633][ C1] ? unmap_page_range+0x2fe0/0x2fe0 [ 109.001898][ C1] ? __lock_acquire+0x7c80/0x7c80 [ 109.006956][ C1] exit_mmap+0x200/0xb50 [ 109.011226][ C1] ? exit_mm_release+0x1a/0x30 [ 109.016012][ C1] ? vm_brk+0x30/0x30 [ 109.020027][ C1] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 109.025704][ C1] ? uprobe_clear_state+0x278/0x290 [ 109.030930][ C1] ? mm_update_next_owner+0x562/0x6c0 [ 109.036327][ C1] __mmput+0x118/0x3c0 [ 109.040866][ C1] exit_mm+0x1da/0x2c0 [ 109.044971][ C1] ? do_exit+0x23c0/0x23c0 [ 109.049413][ C1] ? taskstats_exit+0x35e/0x9e0 [ 109.054291][ C1] do_exit+0x88e/0x23c0 [ 109.058475][ C1] ? put_task_struct+0xc0/0xc0 [ 109.063267][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 109.069276][ C1] ? get_signal+0x1068/0x1400 [ 109.073983][ C1] ? lock_chain_count+0x20/0x20 [ 109.078863][ C1] ? _raw_spin_lock_irq+0xaf/0xe0 [ 109.083905][ C1] do_group_exit+0x21b/0x2d0 [ 109.088517][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 109.093731][ C1] get_signal+0x12fc/0x1400 [ 109.098284][ C1] arch_do_signal_or_restart+0x96/0x780 [ 109.103853][ C1] ? get_sigframe_size+0x20/0x20 [ 109.108823][ C1] ? exit_to_user_mode_loop+0x3b/0x110 [ 109.114303][ C1] exit_to_user_mode_loop+0x70/0x110 [ 109.119606][ C1] exit_to_user_mode_prepare+0xb1/0x140 [ 109.125175][ C1] syscall_exit_to_user_mode+0x1a/0x50 [ 109.130649][ C1] do_syscall_64+0x61/0xb0 [ 109.135091][ C1] ? clear_bhb_loop+0x40/0x90 [ 109.139788][ C1] ? clear_bhb_loop+0x40/0x90 [ 109.144485][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 109.150409][ C1] RIP: 0033:0x480143 [ 109.154315][ C1] Code: Unable to access opcode bytes at 0x480119. [ 109.160823][ C1] RSP: 002b:000000c004009ef0 EFLAGS: 00000286 ORIG_RAX: 00000000000000ca [ 109.169255][ C1] RAX: fffffffffffffe00 RBX: 0000000000000000 RCX: 0000000000480143 [ 109.177241][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000318d078 [ 109.185225][ C1] RBP: 000000c004009f38 R08: 0000000000000000 R09: 0000000000000000 [ 109.193213][ C1] R10: 0000000000000000 R11: 0000000000000286 R12: 000000000047c3c0 [ 109.201200][ C1] R13: 000000c00179c808 R14: 000000c004000000 R15: 0000000000000003 [ 109.209224][ C1] [ 109.212497][ C1] Kernel Offset: disabled [ 109.216860][ C1] Rebooting in 86400 seconds..