[ 76.426709][ T1106] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.1.17' (ED25519) to the list of known hosts. 2025/08/03 23:49:14 ignoring optional flag "sandboxArg"="0" 2025/08/03 23:49:15 parsed 1 programs [ 83.951893][ T4601] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 86.178489][ T1277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.192943][ T1277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.214585][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.223791][ T1277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.232868][ T1277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.242997][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.885761][ T4656] chnl_net:caif_netlink_parms(): no params data found [ 86.939711][ T4656] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.946876][ T4656] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.954921][ T4656] device bridge_slave_0 entered promiscuous mode [ 86.962775][ T4656] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.970176][ T4656] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.977963][ T4656] device bridge_slave_1 entered promiscuous mode [ 87.007935][ T4656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.019551][ T4656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.137834][ T4656] team0: Port device team_slave_0 added [ 87.146537][ T4656] team0: Port device team_slave_1 added [ 87.187847][ T4656] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.195795][ T4656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.223160][ T4656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.236706][ T4656] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.243673][ T4656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.270892][ T4656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.298325][ T4656] device hsr_slave_0 entered promiscuous mode [ 87.305793][ T4656] device hsr_slave_1 entered promiscuous mode [ 87.789835][ T4656] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.800397][ T4656] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.813265][ T4656] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.823128][ T4656] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.953533][ T4656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.968866][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 87.977068][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.990329][ T4656] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.034497][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 88.043952][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.055641][ T1277] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.062714][ T1277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.071454][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 88.082536][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.092264][ T1277] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.099468][ T1277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.108493][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 88.126904][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 88.136294][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 88.147176][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 88.159051][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 88.169421][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 88.179930][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 88.199668][ T4656] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 88.211067][ T4656] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.230099][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 88.238338][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 88.247828][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 88.266421][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 88.387823][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 88.396348][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 88.431513][ T4656] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.452023][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 88.461024][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 88.512534][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 88.521579][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 88.531342][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 88.542437][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 88.553439][ T4656] device veth0_vlan entered promiscuous mode [ 88.565024][ T4656] device veth1_vlan entered promiscuous mode [ 88.597993][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 88.607067][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 88.615624][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.624681][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.636285][ T4656] device veth0_macvtap entered promiscuous mode [ 88.647773][ T4656] device veth1_macvtap entered promiscuous mode [ 88.687375][ T4656] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.700323][ T4656] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.709812][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 88.719622][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 88.728239][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.738949][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.748708][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.758819][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.774577][ T4656] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.783410][ T4656] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.794132][ T4656] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.802852][ T4656] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2025/08/03 23:49:23 executed programs: 0 [ 89.701058][ T4762] chnl_net:caif_netlink_parms(): no params data found [ 89.847966][ T4762] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.855227][ T4762] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.877257][ T4762] device bridge_slave_0 entered promiscuous mode [ 89.899446][ T4762] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.914126][ T4762] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.934115][ T4762] device bridge_slave_1 entered promiscuous mode [ 89.994582][ T4762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.016430][ T4762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.086070][ T4762] team0: Port device team_slave_0 added [ 90.093595][ T4762] team0: Port device team_slave_1 added [ 90.158815][ T4762] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.165839][ T4762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.224126][ T4762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.246494][ T4762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.253448][ T4762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.314172][ T4762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.382805][ T4762] device hsr_slave_0 entered promiscuous mode [ 90.390095][ T4762] device hsr_slave_1 entered promiscuous mode [ 90.404760][ T4762] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.412626][ T4762] Cannot create hsr debugfs directory [ 90.543430][ T4762] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.545348][ T1106] Bluetooth: hci0: command 0x0409 tx timeout [ 93.624397][ T4201] Bluetooth: hci0: command 0x041b tx timeout [ 93.789372][ T4762] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.859294][ T4762] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.919758][ T4762] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.002584][ T4762] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.011179][ T4762] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.020001][ T4762] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.028564][ T4762] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.073332][ T4762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.086344][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 94.095489][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 94.111375][ T4762] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.121104][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 94.130103][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 94.138888][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.145985][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.155495][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 94.170504][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 94.180433][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 94.189574][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.196678][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.207718][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 94.223792][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 94.235993][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 94.245014][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 94.253359][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 94.269566][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 94.278190][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 94.291156][ T4762] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 94.301844][ T4762] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.315225][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 94.323609][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 94.332655][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 94.341989][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 94.350454][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 94.428912][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 94.437143][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 94.449725][ T4762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.471723][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 94.480775][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 94.504483][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 94.512746][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 94.522748][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 94.530541][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 94.539484][ T4762] device veth0_vlan entered promiscuous mode [ 94.555652][ T4762] device veth1_vlan entered promiscuous mode [ 94.571310][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 94.579549][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 94.588214][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 94.596958][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 94.607611][ T4762] device veth0_macvtap entered promiscuous mode [ 94.618610][ T9] device hsr_slave_0 left promiscuous mode [ 94.625147][ T9] device hsr_slave_1 left promiscuous mode [ 94.631605][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.639123][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.646943][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.656514][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.664872][ T9] device bridge_slave_1 left promiscuous mode [ 94.671058][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.679307][ T9] device bridge_slave_0 left promiscuous mode [ 94.685539][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.697254][ T9] device veth1_macvtap left promiscuous mode [ 94.703265][ T9] device veth0_macvtap left promiscuous mode [ 94.709394][ T9] device veth1_vlan left promiscuous mode [ 94.715228][ T9] device veth0_vlan left promiscuous mode [ 94.830791][ T9] team0 (unregistering): Port device team_slave_1 removed [ 94.843913][ T9] team0 (unregistering): Port device team_slave_0 removed [ 94.857148][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.870047][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.919237][ T9] bond0 (unregistering): Released all slaves [ 94.980322][ T4762] device veth1_macvtap entered promiscuous mode [ 94.999791][ T4762] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.007430][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 95.015986][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 95.023882][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 95.032970][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 95.047515][ T4762] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.055183][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 95.064397][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 95.075851][ T4762] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.084917][ T4762] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.093682][ T4762] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.102440][ T4762] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.161391][ T1277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.170427][ T1277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.181734][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 2025/08/03 23:49:29 executed programs: 2 [ 95.202815][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.216413][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.228308][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 95.704237][ T4245] Bluetooth: hci0: command 0x040f tx timeout [ 97.794632][ T4245] Bluetooth: hci0: command 0x0419 tx timeout 2025/08/03 23:49:34 executed programs: 175 2025/08/03 23:49:39 executed programs: 372 2025/08/03 23:49:44 executed programs: 575 [ 110.747854][ T6223] ------------[ cut here ]------------ [ 110.753541][ T6223] WARNING: CPU: 0 PID: 6223 at net/mac80211/offchannel.c:401 ieee80211_start_next_roc+0x194/0x200 [ 110.765089][ T6223] Modules linked in: [ 110.769093][ T6223] CPU: 1 PID: 6223 Comm: syz.0.607 Not tainted 5.15.189-syzkaller #0 [ 110.778644][ T6223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 110.789206][ T6223] RIP: 0010:ieee80211_start_next_roc+0x194/0x200 [ 110.795874][ T6223] Code: 63 35 f8 48 89 df 4c 89 f6 48 89 c2 5b 41 5c 41 5e 41 5f 5d e9 cd 90 0c 00 e8 48 1d 46 f8 0f 0b e9 e6 fe ff ff e8 3c 1d 46 f8 <0f> 0b e9 25 ff ff ff 48 c7 c1 44 a2 69 8d 80 e1 07 80 c1 03 38 c1 [ 110.816493][ T6223] RSP: 0018:ffffc90002f3f290 EFLAGS: 00010293 [ 110.822689][ T6223] RAX: ffffffff8931a6e4 RBX: ffff88807e0e8da0 RCX: ffff888028d20000 [ 110.831560][ T6223] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 110.840004][ T6223] RBP: 0000000000000001 R08: dffffc0000000000 R09: ffffed100faa0254 [ 110.848217][ T6223] R10: ffffed100faa0254 R11: 1ffff1100faa0253 R12: dffffc0000000000 [ 110.856252][ T6223] R13: 0000000000000000 R14: ffff88805da07320 R15: ffff88807e0e95dd [ 110.864289][ T6223] FS: 00007ff8c5ee16c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 110.873222][ T6223] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 110.879839][ T6223] CR2: 000000c0070c6000 CR3: 000000005cfa8000 CR4: 00000000003506f0 [ 110.887843][ T6223] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 110.895872][ T6223] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 110.903846][ T6223] Call Trace: [ 110.907471][ T6223] [ 110.910440][ T6223] ieee80211_scan_cancel+0x142/0x5d0 [ 110.916053][ T6223] ? ieee80211_do_stop+0x12c/0x1c70 [ 110.921381][ T6223] ieee80211_do_stop+0x135/0x1c70 [ 110.926537][ T6223] ? rcu_exp_sel_wait_wake+0x1b00/0x1b00 [ 110.932288][ T6223] ? ieee80211_sdata_stop+0x80/0x80 [ 110.937532][ T6223] ? ieee80211_stop_queues_by_reason+0x19c/0x220 [ 110.944060][ T6223] ? __might_sleep+0xf0/0xf0 [ 110.948667][ T6223] ? init_wait_entry+0xd0/0xd0 [ 110.953525][ T6223] ? ieee80211_check_concurrent_iface+0x618/0x690 [ 110.959983][ T6223] ? ieee80211_get_vif_queues+0x21d/0x390 [ 110.965779][ T6223] ieee80211_if_change_type+0x435/0x9c0 [ 110.971335][ T6223] ieee80211_change_iface+0x57/0x420 [ 110.976832][ T6223] cfg80211_change_iface+0x770/0xeb0 [ 110.982144][ T6223] nl80211_set_interface+0x598/0x7d0 [ 110.987496][ T6223] ? nl80211_dump_interface+0x5c0/0x5c0 [ 110.993064][ T6223] ? mutex_lock_nested+0x17/0x20 [ 110.998073][ T6223] genl_rcv_msg+0xbc6/0xf40 [ 111.002590][ T6223] ? genl_bind+0x370/0x370 [ 111.007075][ T6223] ? verify_lock_unused+0x140/0x140 [ 111.012378][ T6223] ? __dev_queue_xmit+0x1bc5/0x2ed0 [ 111.017907][ T6223] ? dev_queue_xmit+0x20/0x20 [ 111.022798][ T6223] ? nl80211_dump_interface+0x5c0/0x5c0 [ 111.029133][ T6223] netlink_rcv_skb+0x1e0/0x430 [ 111.034048][ T6223] ? genl_bind+0x370/0x370 [ 111.038572][ T6223] ? netlink_ack+0xb60/0xb60 [ 111.043175][ T6223] ? __lock_acquire+0x7c60/0x7c60 [ 111.049100][ T6223] ? preempt_count_add+0x8d/0x190 [ 111.054195][ T6223] ? down_read+0x1aa/0x2e0 [ 111.058792][ T6223] genl_rcv+0x24/0x40 [ 111.062794][ T6223] netlink_unicast+0x774/0x920 [ 111.068377][ T6223] netlink_sendmsg+0x8ab/0xbc0 [ 111.073161][ T6223] ? netlink_getsockopt+0x560/0x560 [ 111.078430][ T6223] ? aa_sock_msg_perm+0x94/0x150 [ 111.083510][ T6223] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 111.089118][ T6223] ? security_socket_sendmsg+0x7c/0xa0 [ 111.094656][ T6223] __sys_sendto+0x423/0x580 [ 111.099170][ T6223] ? __ia32_sys_getpeername+0x80/0x80 [ 111.104614][ T6223] ? __lock_acquire+0x7c60/0x7c60 [ 111.109647][ T6223] ? lock_chain_count+0x20/0x20 [ 111.114551][ T6223] ? vtime_user_exit+0x2dc/0x400 [ 111.119502][ T6223] __x64_sys_sendto+0xda/0xf0 [ 111.124237][ T6223] do_syscall_64+0x4c/0xa0 [ 111.128657][ T6223] ? clear_bhb_loop+0x30/0x80 [ 111.133318][ T6223] ? clear_bhb_loop+0x30/0x80 [ 111.138048][ T6223] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 111.144165][ T6223] RIP: 0033:0x7ff8c6c737bc [ 111.148738][ T6223] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 111.168539][ T6223] RSP: 002b:00007ff8c5edfe20 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 111.177079][ T6223] RAX: ffffffffffffffda RBX: 00007ff8c5edffa0 RCX: 00007ff8c6c737bc [ 111.185263][ T6223] RDX: 0000000000000024 RSI: 00007ff8c5edfff0 RDI: 0000000000000006 [ 111.193237][ T6223] RBP: 0000000000000000 R08: 00007ff8c5edfe74 R09: 000000000000000c [ 111.201254][ T6223] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 111.209315][ T6223] R13: 0000000000000000 R14: 00007ff8c5edfff0 R15: 0000000000000000 [ 111.217431][ T6223] [ 111.220461][ T6223] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 111.227737][ T6223] CPU: 1 PID: 6223 Comm: syz.0.607 Not tainted 5.15.189-syzkaller #0 [ 111.235895][ T6223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 111.245966][ T6223] Call Trace: [ 111.249248][ T6223] [ 111.252226][ T6223] dump_stack_lvl+0x168/0x230 [ 111.257051][ T6223] ? show_regs_print_info+0x20/0x20 [ 111.262387][ T6223] ? load_image+0x3b0/0x3b0 [ 111.267017][ T6223] panic+0x2c9/0x7f0 [ 111.270930][ T6223] ? bpf_jit_dump+0xd0/0xd0 [ 111.275435][ T6223] ? ieee80211_start_next_roc+0x194/0x200 [ 111.281188][ T6223] __warn+0x248/0x2b0 [ 111.285191][ T6223] ? ieee80211_start_next_roc+0x194/0x200 [ 111.290899][ T6223] report_bug+0x1b7/0x2e0 [ 111.295222][ T6223] handle_bug+0x3a/0x70 [ 111.299450][ T6223] exc_invalid_op+0x16/0x40 [ 111.304293][ T6223] asm_exc_invalid_op+0x16/0x20 [ 111.309132][ T6223] RIP: 0010:ieee80211_start_next_roc+0x194/0x200 [ 111.315461][ T6223] Code: 63 35 f8 48 89 df 4c 89 f6 48 89 c2 5b 41 5c 41 5e 41 5f 5d e9 cd 90 0c 00 e8 48 1d 46 f8 0f 0b e9 e6 fe ff ff e8 3c 1d 46 f8 <0f> 0b e9 25 ff ff ff 48 c7 c1 44 a2 69 8d 80 e1 07 80 c1 03 38 c1 [ 111.335223][ T6223] RSP: 0018:ffffc90002f3f290 EFLAGS: 00010293 [ 111.341279][ T6223] RAX: ffffffff8931a6e4 RBX: ffff88807e0e8da0 RCX: ffff888028d20000 [ 111.349237][ T6223] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 111.357201][ T6223] RBP: 0000000000000001 R08: dffffc0000000000 R09: ffffed100faa0254 [ 111.365176][ T6223] R10: ffffed100faa0254 R11: 1ffff1100faa0253 R12: dffffc0000000000 [ 111.373150][ T6223] R13: 0000000000000000 R14: ffff88805da07320 R15: ffff88807e0e95dd [ 111.381385][ T6223] ? ieee80211_start_next_roc+0x194/0x200 [ 111.387201][ T6223] ieee80211_scan_cancel+0x142/0x5d0 [ 111.392472][ T6223] ? ieee80211_do_stop+0x12c/0x1c70 [ 111.397747][ T6223] ieee80211_do_stop+0x135/0x1c70 [ 111.402948][ T6223] ? rcu_exp_sel_wait_wake+0x1b00/0x1b00 [ 111.408588][ T6223] ? ieee80211_sdata_stop+0x80/0x80 [ 111.413787][ T6223] ? ieee80211_stop_queues_by_reason+0x19c/0x220 [ 111.420125][ T6223] ? __might_sleep+0xf0/0xf0 [ 111.424710][ T6223] ? init_wait_entry+0xd0/0xd0 [ 111.429474][ T6223] ? ieee80211_check_concurrent_iface+0x618/0x690 [ 111.435874][ T6223] ? ieee80211_get_vif_queues+0x21d/0x390 [ 111.441587][ T6223] ieee80211_if_change_type+0x435/0x9c0 [ 111.447124][ T6223] ieee80211_change_iface+0x57/0x420 [ 111.452480][ T6223] cfg80211_change_iface+0x770/0xeb0 [ 111.457751][ T6223] nl80211_set_interface+0x598/0x7d0 [ 111.463023][ T6223] ? nl80211_dump_interface+0x5c0/0x5c0 [ 111.468557][ T6223] ? mutex_lock_nested+0x17/0x20 [ 111.473488][ T6223] genl_rcv_msg+0xbc6/0xf40 [ 111.477995][ T6223] ? genl_bind+0x370/0x370 [ 111.482415][ T6223] ? verify_lock_unused+0x140/0x140 [ 111.487598][ T6223] ? __dev_queue_xmit+0x1bc5/0x2ed0 [ 111.492787][ T6223] ? dev_queue_xmit+0x20/0x20 [ 111.497461][ T6223] ? nl80211_dump_interface+0x5c0/0x5c0 [ 111.503027][ T6223] netlink_rcv_skb+0x1e0/0x430 [ 111.507786][ T6223] ? genl_bind+0x370/0x370 [ 111.512199][ T6223] ? netlink_ack+0xb60/0xb60 [ 111.516900][ T6223] ? __lock_acquire+0x7c60/0x7c60 [ 111.522100][ T6223] ? preempt_count_add+0x8d/0x190 [ 111.527107][ T6223] ? down_read+0x1aa/0x2e0 [ 111.531510][ T6223] genl_rcv+0x24/0x40 [ 111.535483][ T6223] netlink_unicast+0x774/0x920 [ 111.540258][ T6223] netlink_sendmsg+0x8ab/0xbc0 [ 111.545009][ T6223] ? netlink_getsockopt+0x560/0x560 [ 111.550279][ T6223] ? aa_sock_msg_perm+0x94/0x150 [ 111.555465][ T6223] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 111.560756][ T6223] ? security_socket_sendmsg+0x7c/0xa0 [ 111.566226][ T6223] __sys_sendto+0x423/0x580 [ 111.570827][ T6223] ? __ia32_sys_getpeername+0x80/0x80 [ 111.576212][ T6223] ? __lock_acquire+0x7c60/0x7c60 [ 111.581242][ T6223] ? lock_chain_count+0x20/0x20 [ 111.586185][ T6223] ? vtime_user_exit+0x2dc/0x400 [ 111.591107][ T6223] __x64_sys_sendto+0xda/0xf0 [ 111.595861][ T6223] do_syscall_64+0x4c/0xa0 [ 111.600287][ T6223] ? clear_bhb_loop+0x30/0x80 [ 111.604983][ T6223] ? clear_bhb_loop+0x30/0x80 [ 111.609761][ T6223] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 111.615724][ T6223] RIP: 0033:0x7ff8c6c737bc [ 111.620130][ T6223] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 111.639977][ T6223] RSP: 002b:00007ff8c5edfe20 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 111.648392][ T6223] RAX: ffffffffffffffda RBX: 00007ff8c5edffa0 RCX: 00007ff8c6c737bc [ 111.656484][ T6223] RDX: 0000000000000024 RSI: 00007ff8c5edfff0 RDI: 0000000000000006 [ 111.664566][ T6223] RBP: 0000000000000000 R08: 00007ff8c5edfe74 R09: 000000000000000c [ 111.672555][ T6223] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 111.680534][ T6223] R13: 0000000000000000 R14: 00007ff8c5edfff0 R15: 0000000000000000 [ 111.688516][ T6223] [ 111.691895][ T6223] Kernel Offset: disabled [ 111.696348][ T6223] Rebooting in 86400 seconds..