program: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000000)={[{@fault_injection={'fault_injection', 0x3d, 0xffffffff00000001}}]}, 0x41, 0x182, &(0x7f0000000580)="$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") r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) getresgid(0x0, 0x0, 0x0) (async) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x24, r3, 0x5, 0x4, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x30, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) (async) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000780)=@ctrl_frame=@cf_end_cf_ack={{}, {0x2}, @broadcast}, 0x10) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f0000000600)=ANY=[], 0x4, 0x1517, &(0x7f0000001bc0)="$eJzs3AuYT9X6OPD3XWvtMSbp2ySXYa31br7JZZkkiSTJJUmSJMktIWmSIwmJIbekIQnJZUguQ0guE5PG/X6/JkmSJMktt2T9nyn+Tqd6zjm/Osfv+c37eZ79fPc7e79rv3u/38ve+zsz33YaXL1hjSr1iQj+FPzlIRkAYgGgPwBcAwABAJSNLxuftTynxOQ/txH213o47UpXwK4k7n/2xv3P3rj/2Rv3P3vj/mdv3P/sjfufvXH/GcvONk4tcC1P2Xfi+//ZGX/+/x9yoNToL1eXur7zv5HC/c/euP//ZwX/ykrc/+yN+5+9cf+zN+5/dpDjD5dw/7M37j9j2dmVvv/M05WdrvTzjzHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcZY9nDGX6YA4NL8la6LMcYYY4wxxhhjfx2f40pXwBhjjDHGGGOMsf88BAESFAQQAzkgFnJCHAgAuBpywzUQgWshHq6DPHA95IV8kB8KQAIUhEKgwYAFghAKQxGIwg1QFG6EYlAcSkBJcFAKEuEmKA03Qxm4BcrCrVAOboPyUAFuh4pwB1SCO6Ey3AVV4G6oCtWgOtSAe6Am3Au14D6oDfdDHXgA6sKDUA8egvrwMDSAR6AhPAqN4DFoDE2gKTSD5v+j/BehG7wE3aEHJENP6AUvQ2/oA32hH/SHV2AAvAoD4TVIgUEwGF6HIfAGDIU3YRgMhxHwFoyEt2EUjIYxMBZSYRyMh3dgArwLE2ESTIYpkAZTYRq8B9NhBsyE92EWfACzYQ7MhXmQDh/CfFgAGfARLISPIRMWwWJYAkthGSyHFbASVsFqWANrYR2shw2wETbBZtgCW2EbbIcdsBM+gV3wKeyGz2APfP5v5p/+h/zOCAgoUKBChTEYg7EYi3EYh7kwF+bG3BjBCMZjPObBPJgX82J+zI8JmICFsBAaNEhIWBgLYxSjWBSLYjEshiWwBDp0mIiJWBpvxjJYBstiWSyH5bA8VsAKWBErYiWshJWxMlbBKlgVq2J1rI734D3YE2thLayNtbEO1rl0ewrrY31sgA2wITbERtgIG2NjbIpNsTk2xxbYAltiS2yNrbENtsG22BaTMAnbYTtsj+2xA3bAjtgRO2En7IxdsAu+mAPwJXwJe2BV0RN7YS/sjSk5+mI/7Iev4AB8FV/F1zAFB+FgfB1fxzdwKJ7CYTgcR+AIrCTexlE4GkmMxVRMxfE4HifgBJyIk3ASTsE0nIrTcBpOxxk4A9/HWfgBfoBzcA7Ow3RMx/m4ADMwAxfiaczERbgYl+BSXIZLcQWuxBW4GtfgalyH63ADbsBNuAm34BbchttwByoA/AQ/xU8xBffgHtyLe3Ef7sP9uB8PoISDeBAP4SE8jIfxCB7Bo3gMj+MxPIkn8RSexjN4Bs/hOTyPzyd83WBH8VUpILIooUSMiBGxIlbEiTiRS+QSuUVuERERES/iRR6RR+QVeUV+kV8kiARRSBQSRhhBIowBABEVUVFUFBXFRDFRQpQQTjiRKBJFaVFalBFlRFlxqygnbhPlRQXRylUUFUUl0dpVFneJKqKKqCqqieqihqghaoqaopaoJWqL2qKOqCPqigdFPdET++LDIqszDcUgbCQGY2PRRMiL72AtxFBsKVqJ1uJJMRyHYVvRwiWJZ0Q7MQrbi7+J0fic6CjGYifxgugsuoiu4kXRTbR03UUPMRF7il5iCvYWfURf0U9Mx2rifZyVs7p4TaSIQWKweF3MwzfEUPGmGCaGixHiLTFSvC1GidFijBgrUsU4MV68IyaId8VEMUlMFlNEmpgqpon3xHQxQ8wU74tZ4gMxW8wRc8U8kS4+FPPFApEhPhILxcciUywSi8USsVQsE8vFCrFSrBKrxRqxVqwT68UGsVFsEpvFFrFVbBPbxQ6xU3widolPxW7xmdgjPhd7xRdin/hS7BdfiQPia3FQfCMOiW/FYfGdOCK+F0fFMXFcnBAnxQ/ilDgtzoiz4pz4UZwXP4kLwguQKIWUUslAxsgcMlbmlHHyKplLBheP7rUyXl4n88jrZV6ZT+aXBWSCLCgLSS2NtJJkKAvLIjIqb5BF5Y2ymCwuS8iS0slSMlHeJEvLm2UZeYssK2+V5eRtsrysIG+XFeUdspK8U0Lkl21UldVkdVlD3iNryntlLXmfrC3vl3XkA7KufFDWkw/J+vJh2UA+IhvKR2Uj+ZhsLJvIprKZbC4fly3kE7KlbCVbyydlG/mUbCuflknyGdlO+otPkedkR/m87CRfkJ1lF9lV/iQvSC+7yx4SoKfsJV+WvWUf2Vf2k/3lK3KAfFUOlK/JFDlIDpavyyHyDTlUvimHyeFyhHxLjpRvy1FytBwjx8pUOU6Ol+/ICfJdOVFOkpPlFJkmp8q+F0eaKeU/zX/nH/LbXDzyg+QGuVFukpvlFrlVbpPb5Q65U+6Uu+QuuVvulnvkHrlX7pX75D65X+6XB+QBeVAelIfkIXlYHpZH5BF5VB6TZ+UJeVL+IE/J0/K0PCvPyXPy/MVjAAqVUFIpFagYlUPFqpwqTl2lcqmrVW51jYqoa1W8uk7lUdervCqfyq8KqARVUBVSWhllFalQFVZFVFTdgBfLViVUSeVUKZWobvp38lVRdaMqpor/Kv9Sfcl/UF9z1Vy1UC1US9VStVatVRvVRrVVbVWSSlLtVDvVXrVXHVQH1VF1VJ1UJ9VZdVZdVVfVTXVT3VV3laySVS/1suqt+qi+qp/qr15RA9QANVANVCkqRQ1Wg9UQNUQNVUPVMDVMjVAj1Eg1Uo1So9QYNUalqlQ1Xo1XE9QENVFNVJPVZJWm0tQ0NU1NV9PVTDVTzVKz1Gw1W81Vc1W6Slfz1XyVoTLUQrVQZapFapFaopaoZWqZWqFWqFVqlVqj1qh1ap3KVBvVRrVZbVZb1Va1XW1XO9VOtUvtUrvVbrVH7VF71V61T+1T+9V+dUAdUAfVQXVIHVKH1WF1RB1RR9VRdVwdVyfVSXVKnVJn1Bl1Tp1T59V5dUFdyDrtC0QgAhWoICaICWKD2CAuiAtyBbmC3EHuIBJEgvggPsgTXB/kDfIF+YMCQUJQMCgU6MAENhAXmx4NbgiKBjcGxYLiQYmgZOCCUkFicFNQOrg5KBPcEpQNbg3KBbcF5YMKwe1BxeCOoFJwZ1A5uCuoEtwdVA2qBdWDGsE9Qc3g3qBWcF9QO7g/qBM8ENQNHgzqBQ8F9YOHgwbBI0HD4NGgUfBY0DhoEjQNmgXN/9LxvT+V7wnXXffQybqn7qVf1r11H91X99P99St6gH5VD9Sv6RQ9SA/Wr+sh+g09VL+ph+nheoR+S4/Ub+tRerQeo8fqVD1Oj9fv6An6XT1RT9KT9RSdpqfqafo9PV3P0DP1+3qW/kDP1nP0XD1Pp+sP9Xy9QGfoj/RC/bHO1Iv0Yr1EL9XL9HK9Qq/Uq/RqvUav1ev0er1Bb9Sb9Ga9RW/V2/R2vUPv1J/oXfpTvVt/pvfoz/Ve/YXep7/U+/VX+oD+Wh/U3+hD+lt9WH+nj+jv9VF9TB/XJ/RJ/YM+pU/rM/qsPqd/1Of1T/qCvvSloDDKKBNjYkysiTVxJs7kMrlMbpPbREzExJt4k8fkMXlNXpPf5DcJJsEUMoVMFjJkCpvCJmqipqgpaoqZYqaEKWGccSbRJJrSprQpY8qYsqasKWfKmfKmvLnd3G7uMHeYO82d5i5zl7nb3G2qmWqmhqlhapqappapZWqb2qaOqWPqmrqmnqln6pv6poFpYBqahqaRaWQam8amqWlqmpvmpoVpYVqalqa1aW3amDamrWlrkkySaWfamfamvelgOpiOpqPpZDqZzqaz6Wq6mm6mm+luuptkk2x6mV6mt+lt+pq+pr/pbwaYAWagGWhSTIoZbAabIWaIGWqGmmFmuBmRdcjM22aUGW3GmLEm1aSa8Wa8mWAmmIlmovEIkGbSzDQzzUw3081MM9PMMrPMbDPbzDVzTbpJN/PNfJNhMsxCs9Bkmkyz2Cw2S81Ss9wsNyvNSrParDZrYa1Zb9abjWaj2Ww2m61mq9lutpudZqfZZXaZ3Wa32WP2mL1mr9ln9pn9Zr85YA6Yg+agOWQOmcPmsDlijpij5qg5bo6bk+akOWVOmTPmjDln8l38vPQm1ua0cfYqm8tebXPba+w/xvltAZtgC9pCVtu8Nt+vYmOtLWaL2xK2pHW2lE20N/0mLm8r2NttRXuHrWTvtJV/E9e099pa9j5b295va9h7fhXXsQ/YuvZRWw8RwDaxDWwz29A+ahvZx2xj28Q2tc1sG/uUbWuftkn2GdvOPvubeL5dYFfaVXa1XWN32U/tGXvWHrLf2nP2R9vd9rD97St2gH3VDrSv2RQ76DfxCPuWHWnftqPsaDvGjv1NPNlOsWl2qp1m37PT7YzfxOn2QzvLZtjZdo6da+f9HGfVlGE/sgvtxzbTLrKL7RK71C6zy+2K/1/rErvOrrcb7E77id1st9itdpvdbnf8HGftx277md1jP7cH7Td2n/3S7reH7QH79c9x1v4dtt/ZI/Z7e9Qes8ftCXvS/mBP2dM/73/Wvp+wP9kL1lsgJCBJigKKoRwUSzkpjq6iXHQ15aZrKELXUjxdR3noespL+Sg/FaAEKkiFSJMhS0QhFaYiFKUb6NJ5egkqSY5KUSLdRKXpZipDt1BZupXK0W1UnirQ7VSR7qBKdCdVpruoCt1NVakaVacadA/VpHupFt1Htel+qkMPUF16kOrRQ1SfHqYG9Ag1pEepET1GjakJNaVm1Jwepxb0BLWkVtSanqQ29BS1pacpiZ6hdvQstae/UQd6jjrS89SJXqDO1IW60ovUjV6i7tSDkqkn9aKXqTf1ob7Uj/rTKzSAXqWB9Bql0CAaTK/TEHqDhtKbNIyG0wh6i0bS2zSKRtMYGkupNI7G0zs0gd6liTSJJtMUSqOpNI3eo+k0g2bS+zSLPqDZNIfm0jxKpw9pPi2gDPqIFtLHlEmLaDEtoaW0jJbTClpJq2g1raG1tI7W0wbaSJtoM22hrbSNttMO2kmf0C76lHbTZ7SHPqe99AXtoy9pP31FB+hrOkjf0CH6lg7Td74HfU9H6RgdpxN0kn6gU3SaztBZOkc/0nn6iS6QJwgxFKEMVRiEMWGOMDbMGcaFV4W5wqvD3OE1YSS8NowPrwvzhNeHecN8Yf6wQJgQFgwLhTo0oQ0pDMPCYZEwGt4QFg1vDIuFxcMSYcnQhaXCxPCmsHR4c1gmvCUsG94algtvC8uHFcJH768Y3hFWCu8MK4d3hVXCu8OqYbWwelgjvCesGd4b1grvC2uH94dlwgfCuuGDYb3wobB++HDYIHwkbBg+GjYKHwsbh03CpmGzsHn4eNgifCJsGbYKW4dPhm3Cp8K24dNhUvhM2C589uflDyz44+XJYc+wV/hy+HLo/X1ybnReND36YXR+dEE0I/pRdGH042hmdFF0cXRJdGl0WXR5dEV0ZXRVdHV0TXRtdF10fXRD1PsaOcChE0465QIX43K4WJfTxbmrXC53tcvtrnERd62Ld9e5PO56l9flc/ldAZfgCrpCTjvjrCMXusKuiIu6G1xRd6Mr5oq7Eq6kc66US3TNXHPX3LVwT7iWrpVr7Z50T7qn3FPuafe0e8a1c8+69u5vroN7znV0z7vn3Quus+viuroXXTc3Lvcvr8lk18v1cr1db9fX9XX9XX83wA1wA91Al+JS3GA32A1xQ9xQN9QNc8PcCDfCjXQj3Sg3yo1xY1yqS3Xj3Xg3wU1wE91EN9lNdmkuzU1z09x0N91VmvHLVma72W6um+vSXbqb77LOGTPcQrfQZbpMt9gtdkvdUrfcLXcr3Uq32q12a91at96tdxvdRrfZbXZb3Va33W13O91Ot8tf88ugbo/b6/a6fW6f2+++cgfc1+6g+8Ydct+6w+47d8R97466Y+64O+FOuh/cKXfanXFn3Tn3ozvvfnIXnHepkXGR8ZF3IhMi70YmRiZFJkemRNIiUyPTIu9FpkdmRGZG3o/MinwQmR2ZE5kbmRdJj3wYmR9ZEMmIxEYWRj6OZEYWRRZHlkSWRpZFvC+4OfSFfREf9Tf4ov5GX8wX9yV8Se98KZ/ob/Kl/c2+jL/Fl/W3+nL+Nl/eV/C3+8d8Y9/EN/XNfHP/uG/hn/AtfSvf2j/p2/infFv/tE/yz/h2/lnf3v/Nd/DP+Y7+ed/Jv+A7+y6+q3/Rd/Mv+e6+h0/2PX0v/7Lv7fv4vr6f7+9f8QP8q36gf82n+EF+sH/dD/Fv+KH+TT/MD/cjYt7yIy9dIsNYn+rH+fH+HT/Bv+sn+kl+sp/i0/xUP82/56f7GX6mf9/P8h/42X6On+vn+XT/oZ/vF/gM/5Ff6D/2mX7RpZvKfrlf4Vf6VX61X+PX+nV+vd/gN/pNfrPf4rf6bX673+F3+k/8Lv+p3+0/83v8536v/8Lv81/6/f4rf8B/7Q/6b/wh/60/7L/zR/z3/qg/5o/7E/6k/8Gf8qf9GX/Wn/M/+vP+J3+B/2aNMcYYY+xfMu7yrPi95T1/52fi71buBQBXbylw4O+XZ51Rrs37y3wfkdAmAgDP9Oj08KWpatXk5OSL62ZKCIrMAbj0TVCWGLgcL4LW8BQkQSso/bv19xFdztE/GT96K0Dc3+XEwuX48vhf/MH4jz85Yn658Ez874yPF8efA1CsyOWcnHA5XgStVdZjKyjzB+Pna/FP6s/5ZSpAy7/LyQWX48v1J8IT8Cwk/WpNxhhjjDHGGGPsF30ufv2Tdd156Tc+f+/6PEFdzskBl+N/cn3+wOL/aPWMMcYYY4wxxhj7V+x6ouvTjyclterwXJd/d6by/yiLZ/5jM1n9/BPp3l9OVwDwJ+sB+K8fhE3/lW2lXHzp/OOipWd9AP87ngl/xcyVfV9ijDHGGGOM/fV+ffV4mbpSBTHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY9nQf+v/0jHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGPZ2f8LAAD//xjHB2E=") (async) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = open(&(0x7f0000000140)='./file1\x00', 0x141042, 0x20) fallocate(r5, 0x8, 0x2000000, 0x10000) nanosleep(&(0x7f0000000480)={0x0, 0x2faf080}, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000540)=@device_b, &(0x7f0000000580)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) (async) syz_80211_inject_frame(&(0x7f0000000640)=@device_b, &(0x7f0000000680)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val, @void}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x3, &(0x7f0000000000), 0xbc, 0x553, &(0x7f0000000180)="$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") (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000007c0)=ANY=[@ANYBLOB="80800000ffffffffffff08021100000008021100000170001c004a01010000000000000064000100010003013404060005ff0103000602000005037c2008250301000008217606a9053600008000"/87], 0x57) (async) ioctl$TIOCCBRK(r1, 0x5428) (async) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000ec0)={0x0, 0x0, 0xe, 0x2, 0x2d, &(0x7f0000000f00)="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"}) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r0, &(0x7f0000000180)="3300000008000102030405060101", 0xe) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004f40)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}}, 0x0) [ 122.323533][ T4644] Bluetooth: hci0: command tx timeout [ 122.330479][ T5317] loop0: detected capacity change from 0 to 16 [ 122.376707][ T5317] erofs: Unknown parameter 'fault_injection' [ 122.419347][ T5319] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.448189][ T5319] loop0: detected capacity change from 0 to 256 [ 122.448883][ T5321] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.467483][ T5322] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.516819][ T5321] Bluetooth: MGMT ver 1.23 [ 122.557143][ T5324] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.597768][ T5322] warning: `syz.0.0' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 122.656030][ T70] ------------[ cut here ]------------ [ 122.656044][ T70] intreq != rdev->scan_req && intreq != rdev->int_scan_req [ 122.656050][ T70] WARNING: net/wireless/scan.c:1230 at cfg80211_scan_done+0x346/0x520, CPU#0: kworker/u4:4/70 [ 122.666088][ T70] Modules linked in: [ 122.668126][ T70] CPU: 0 UID: 0 PID: 70 Comm: kworker/u4:4 Not tainted syzkaller #0 PREEMPT(full) [ 122.672207][ T70] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 122.677081][ T70] Workqueue: events_unbound cfg80211_wiphy_work [ 122.679694][ T70] RIP: 0010:cfg80211_scan_done+0x346/0x520 [ 122.682275][ T70] Code: e8 ff 84 95 f6 90 0f 0b 90 e9 d0 fd ff ff e8 f1 84 95 f6 48 8d 3d 3a 70 59 05 67 48 0f b9 3a e9 13 fe ff ff e8 db 84 95 f6 90 <0f> 0b 90 e9 c2 fe ff ff 89 f9 80 e1 07 38 c1 0f 8c 1a fe ff ff e8 [ 122.690582][ T70] RSP: 0018:ffffc90000df7940 EFLAGS: 00010293 [ 122.693433][ T70] RAX: ffffffff8b329ac5 RBX: ffff8880448e0c18 RCX: ffff888031790000 [ 122.696717][ T70] RDX: 0000000000000000 RSI: ffffffff8c6dcd60 RDI: ffff8880448e0c11 [ 122.699718][ T70] RBP: ffffc90000df7a00 R08: ffffffff907a867f R09: 1ffffffff20f50cf [ 122.703228][ T70] R10: dffffc0000000000 R11: fffffbfff20f50d0 R12: ffff8880448e0c00 [ 122.706803][ T70] R13: ffff8880525607a0 R14: 1ffff920001bef2c R15: dffffc0000000000 [ 122.710052][ T70] FS: 0000000000000000(0000) GS:ffff88808c2bc000(0000) knlGS:0000000000000000 [ 122.714012][ T70] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 122.716847][ T70] CR2: 00007ffbd8022e9c CR3: 0000000050946000 CR4: 0000000000352ef0 [ 122.720291][ T70] Call Trace: [ 122.721891][ T70] [ 122.723267][ T70] ? __pfx_cfg80211_scan_done+0x10/0x10 [ 122.725599][ T70] __ieee80211_scan_completed+0x548/0xb20 [ 122.728059][ T70] cfg80211_wiphy_work+0x29e/0x420 [ 122.730173][ T70] ? process_scheduled_works+0x97a/0x1630 [ 122.732782][ T70] process_scheduled_works+0xc3d/0x1630 [ 122.735132][ T70] ? __pfx_process_scheduled_works+0x10/0x10 [ 122.737707][ T70] ? assign_work+0x3cf/0x5d0 [ 122.739668][ T70] worker_thread+0xa47/0xfb0 [ 122.741741][ T70] kthread+0x38b/0x480 [ 122.743423][ T70] ? __pfx_worker_thread+0x10/0x10 [ 122.745701][ T70] ? __pfx_kthread+0x10/0x10 [ 122.747592][ T70] ret_from_fork+0x514/0xb70 [ 122.749594][ T70] ? __pfx_ret_from_fork+0x10/0x10 [ 122.752078][ T70] ? __switch_to+0xc89/0x1420 [ 122.756439][ T70] ? __pfx_kthread+0x10/0x10 [ 122.758329][ T70] ret_from_fork_asm+0x1a/0x30 [ 122.760343][ T70] [ 122.761806][ T70] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 122.764930][ T70] CPU: 0 UID: 0 PID: 70 Comm: kworker/u4:4 Not tainted syzkaller #0 PREEMPT(full) [ 122.768789][ T70] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 122.772956][ T70] Workqueue: events_unbound cfg80211_wiphy_work [ 122.775554][ T70] Call Trace: [ 122.776924][ T70] [ 122.777998][ T70] vpanic+0x56d/0xa60 [ 122.780605][ T70] ? __pfx__printk+0x10/0x10 [ 122.782467][ T70] ? __pfx_vpanic+0x10/0x10 [ 122.784392][ T70] ? is_bpf_text_address+0x292/0x2b0 [ 122.786553][ T70] ? is_bpf_text_address+0x26/0x2b0 [ 122.788695][ T70] panic+0xc5/0xd0 [ 122.790244][ T70] ? __pfx_panic+0x10/0x10 [ 122.792081][ T70] ? ret_from_fork_asm+0x1a/0x30 [ 122.794328][ T70] __warn+0x315/0x4c0 [ 122.796055][ T70] ? cfg80211_scan_done+0x346/0x520 [ 122.798279][ T70] ? cfg80211_scan_done+0x346/0x520 [ 122.800549][ T70] __report_bug+0x276/0x570 [ 122.802770][ T70] ? cfg80211_scan_done+0x346/0x520 [ 122.805125][ T70] ? __pfx___report_bug+0x10/0x10 [ 122.807392][ T70] ? __mutex_unlock_slowpath+0x731/0x900 [ 122.809836][ T70] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 122.812548][ T70] ? schedule+0x90/0x2b0 [ 122.814454][ T70] ? cfg80211_scan_done+0x346/0x520 [ 122.816679][ T70] report_bug+0x16b/0x220 [ 122.818584][ T70] ? cfg80211_scan_done+0x346/0x520 [ 122.820899][ T70] ? cfg80211_scan_done+0x348/0x520 [ 122.823293][ T70] handle_bug+0x9c/0x200 [ 122.825616][ T70] exc_invalid_op+0x1a/0x50 [ 122.827848][ T70] asm_exc_invalid_op+0x1a/0x20 [ 122.830110][ T70] RIP: 0010:cfg80211_scan_done+0x346/0x520 [ 122.832687][ T70] Code: e8 ff 84 95 f6 90 0f 0b 90 e9 d0 fd ff ff e8 f1 84 95 f6 48 8d 3d 3a 70 59 05 67 48 0f b9 3a e9 13 fe ff ff e8 db 84 95 f6 90 <0f> 0b 90 e9 c2 fe ff ff 89 f9 80 e1 07 38 c1 0f 8c 1a fe ff ff e8 [ 122.840878][ T70] RSP: 0018:ffffc90000df7940 EFLAGS: 00010293 [ 122.843517][ T70] RAX: ffffffff8b329ac5 RBX: ffff8880448e0c18 RCX: ffff888031790000 [ 122.847123][ T70] RDX: 0000000000000000 RSI: ffffffff8c6dcd60 RDI: ffff8880448e0c11 [ 122.850572][ T70] RBP: ffffc90000df7a00 R08: ffffffff907a867f R09: 1ffffffff20f50cf [ 122.854054][ T70] R10: dffffc0000000000 R11: fffffbfff20f50d0 R12: ffff8880448e0c00 [ 122.857521][ T70] R13: ffff8880525607a0 R14: 1ffff920001bef2c R15: dffffc0000000000 [ 122.860838][ T70] ? cfg80211_scan_done+0x345/0x520 [ 122.862991][ T70] ? __pfx_cfg80211_scan_done+0x10/0x10 [ 122.865401][ T70] __ieee80211_scan_completed+0x548/0xb20 [ 122.867947][ T70] cfg80211_wiphy_work+0x29e/0x420 [ 122.870110][ T70] ? process_scheduled_works+0x97a/0x1630 [ 122.872467][ T70] process_scheduled_works+0xc3d/0x1630 [ 122.874932][ T70] ? __pfx_process_scheduled_works+0x10/0x10 [ 122.877556][ T70] ? assign_work+0x3cf/0x5d0 [ 122.879626][ T70] worker_thread+0xa47/0xfb0 [ 122.881545][ T70] kthread+0x38b/0x480 [ 122.883299][ T70] ? __pfx_worker_thread+0x10/0x10 [ 122.885393][ T70] ? __pfx_kthread+0x10/0x10 [ 122.887354][ T70] ret_from_fork+0x514/0xb70 [ 122.889381][ T70] ? __pfx_ret_from_fork+0x10/0x10 [ 122.891690][ T70] ? __switch_to+0xc89/0x1420 [ 122.893832][ T70] ? __pfx_kthread+0x10/0x10 [ 122.895884][ T70] ret_from_fork_asm+0x1a/0x30 [ 122.897998][ T70] [ 122.900690][ T70] Kernel Offset: disabled [ 122.902491][ T70] Rebooting in 86400 seconds..