Warning: Permanently added '10.128.1.174' (ED25519) to the list of known hosts. 2026/08/15 05:41:43 parsed 1 programs [ 103.064773][ T4494] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 104.702208][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.710753][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.722775][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 104.745653][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.753519][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.761515][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 106.561041][ T4658] chnl_net:caif_netlink_parms(): no params data found [ 106.700037][ T4658] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.707758][ T4658] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.716800][ T4658] device bridge_slave_0 entered promiscuous mode [ 106.731050][ T4658] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.738568][ T4658] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.748465][ T4658] device bridge_slave_1 entered promiscuous mode [ 106.784415][ T4658] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.795692][ T4658] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.819520][ T4658] team0: Port device team_slave_0 added [ 106.827105][ T4658] team0: Port device team_slave_1 added [ 106.847161][ T4658] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.854165][ T4658] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.880290][ T4658] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.892713][ T4658] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.899793][ T4658] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.925906][ T4658] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.956507][ T4658] device hsr_slave_0 entered promiscuous mode [ 106.963331][ T4658] device hsr_slave_1 entered promiscuous mode [ 107.544936][ T4658] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 107.555860][ T4658] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 107.591901][ T4658] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 107.604670][ T4658] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 107.721055][ T4658] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.764735][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 107.774839][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 107.786779][ T4658] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.797218][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 107.808460][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 107.818687][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.826196][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.857229][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 107.867017][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 107.876612][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 107.886383][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.893529][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.929362][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 107.940777][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 107.958240][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 107.969024][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 107.978537][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 107.987742][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 107.997667][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 108.007653][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 108.016597][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 108.043802][ T4658] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 108.058295][ T4658] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 108.067270][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 108.076361][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 108.264933][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 108.273596][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 108.288850][ T4658] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.328507][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 108.345980][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 108.374869][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 108.398307][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 108.417249][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 108.435626][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 108.447889][ T4658] device veth0_vlan entered promiscuous mode [ 108.470313][ T4658] device veth1_vlan entered promiscuous mode [ 108.507118][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 108.516504][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 108.537357][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 108.547113][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 108.558906][ T4658] device veth0_macvtap entered promiscuous mode [ 108.570053][ T4658] device veth1_macvtap entered promiscuous mode [ 108.590432][ T4658] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.599747][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 108.611921][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 108.622059][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 108.631171][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 108.645753][ T4658] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.653291][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 108.664728][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 108.677228][ T4658] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.688102][ T4658] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.697588][ T4658] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.708157][ T4658] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/08/15 05:41:55 executed programs: 0 [ 110.462457][ T4769] chnl_net:caif_netlink_parms(): no params data found [ 110.599909][ T4769] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.618216][ T4769] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.638651][ T4769] device bridge_slave_0 entered promiscuous mode [ 110.660068][ T4769] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.667414][ T4769] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.698517][ T4769] device bridge_slave_1 entered promiscuous mode [ 110.761275][ T4769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.779705][ T4769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.827652][ T4769] team0: Port device team_slave_0 added [ 110.838605][ T4769] team0: Port device team_slave_1 added [ 110.858836][ T144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.895482][ T4769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.902483][ T4769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.930265][ T4769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.943382][ T4769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.950712][ T4769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.977388][ T4769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.014303][ T4769] device hsr_slave_0 entered promiscuous mode [ 111.021212][ T4769] device hsr_slave_1 entered promiscuous mode [ 111.028158][ T4769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 111.035909][ T4769] Cannot create hsr debugfs directory [ 112.286969][ T4298] Bluetooth: hci0: command 0x0409 tx timeout [ 113.731823][ T144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.823202][ T144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.884170][ T144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.365993][ T4256] Bluetooth: hci0: command 0x041b tx timeout [ 114.784203][ T4769] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 114.794801][ T4769] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 114.805977][ T4769] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 114.832845][ T4769] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 114.881826][ T144] device hsr_slave_0 left promiscuous mode [ 114.890361][ T144] device hsr_slave_1 left promiscuous mode [ 114.897652][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.906156][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.914377][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.922453][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.938550][ T144] device bridge_slave_1 left promiscuous mode [ 114.944832][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.956630][ T144] device bridge_slave_0 left promiscuous mode [ 114.963002][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.977945][ T144] device veth1_macvtap left promiscuous mode [ 114.984041][ T144] device veth0_macvtap left promiscuous mode [ 114.992914][ T144] device veth1_vlan left promiscuous mode [ 114.999163][ T144] device veth0_vlan left promiscuous mode [ 115.204419][ T144] team0 (unregistering): Port device team_slave_1 removed [ 115.217723][ T144] team0 (unregistering): Port device team_slave_0 removed [ 115.230488][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.243988][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 115.302369][ T144] bond0 (unregistering): Released all slaves [ 115.373985][ T4769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.401877][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 115.409976][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 115.423295][ T4769] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.443682][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 115.452701][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 115.462679][ T3084] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.470081][ T3084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.479319][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 115.495063][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 115.518426][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 115.527326][ T3084] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.534406][ T3084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.546690][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 115.559049][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 115.584745][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 115.595415][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 115.604235][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 115.616613][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 115.625586][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 115.634094][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 115.642772][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 115.654140][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 115.663167][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 115.674371][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 115.796560][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 115.804084][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 115.818603][ T4769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.839291][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 115.849488][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 115.873299][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 115.884225][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 115.896830][ T4769] device veth0_vlan entered promiscuous mode [ 115.909263][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 115.918640][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 115.931145][ T4769] device veth1_vlan entered promiscuous mode [ 115.953480][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 115.962715][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 115.981169][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 115.991797][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 116.003145][ T4769] device veth0_macvtap entered promiscuous mode [ 116.013903][ T4769] device veth1_macvtap entered promiscuous mode [ 116.031799][ T4769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.039623][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 116.049242][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 116.057737][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 116.067990][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 116.082895][ T4769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.090577][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 116.101059][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 116.113351][ T4769] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.122641][ T4769] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.131732][ T4769] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.140772][ T4769] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.202302][ T4309] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.218624][ T4309] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.228053][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 2026/08/15 05:42:01 executed programs: 2 [ 116.253628][ T334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.264010][ T334] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.273083][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 116.445661][ T23] Bluetooth: hci0: command 0x040f tx timeout [ 117.807678][ T5110] ------------[ cut here ]------------ [ 117.813532][ T5110] WARNING: CPU: 1 PID: 5110 at net/mac80211/offchannel.c:401 ieee80211_start_next_roc+0x194/0x200 [ 117.824589][ T5110] Modules linked in: [ 117.829024][ T5110] CPU: 0 PID: 5110 Comm: syz.0.51 Not tainted syzkaller #0 [ 117.836654][ T5110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 117.847030][ T5110] RIP: 0010:ieee80211_start_next_roc+0x194/0x200 [ 117.853402][ T5110] Code: 3c 20 f8 48 89 df 4c 89 f6 48 89 c2 5b 41 5c 41 5e 41 5f 5d e9 2d 9d 0c 00 e8 78 31 31 f8 0f 0b e9 e6 fe ff ff e8 6c 31 31 f8 <0f> 0b e9 25 ff ff ff 48 c7 c1 84 41 8b 8d 80 e1 07 80 c1 03 38 c1 [ 117.873434][ T5110] RSP: 0018:ffffc900014ef2b8 EFLAGS: 00010293 [ 117.879715][ T5110] RAX: ffffffff8947cb44 RBX: ffff8880796b8e00 RCX: ffff888075e5d940 [ 117.887907][ T5110] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 117.896170][ T5110] RBP: 0000000000000001 R08: ffff888075c7d29f R09: 1ffff1100eb8fa53 [ 117.904175][ T5110] R10: dffffc0000000000 R11: ffffed100eb8fa54 R12: dffffc0000000000 [ 117.912264][ T5110] R13: 0000000000000000 R14: ffff88801eb9c220 R15: ffff8880796b963d [ 117.920850][ T5110] FS: 00007f56359b56c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 117.929983][ T5110] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 117.936643][ T5110] CR2: 00002000000001c0 CR3: 000000007180a000 CR4: 00000000003506f0 [ 117.944676][ T5110] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 117.952790][ T5110] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 117.961049][ T5110] Call Trace: [ 117.964370][ T5110] [ 117.967477][ T5110] ieee80211_scan_cancel+0x141/0x5d0 [ 117.972849][ T5110] ieee80211_do_stop+0x19c/0x1d30 [ 117.977960][ T5110] ? ieee80211_sdata_stop+0x80/0x80 [ 117.983202][ T5110] ? ieee80211_stop_queues_by_reason+0x19c/0x220 [ 117.989722][ T5110] ? __might_sleep+0xf0/0xf0 [ 117.994369][ T5110] ? ieee80211_add_pending_skbs+0x2b0/0x2b0 [ 118.000486][ T5110] ? ieee80211_get_vif_queues+0x21d/0x390 [ 118.006322][ T5110] ieee80211_if_change_type+0x3e1/0x990 [ 118.011931][ T5110] ieee80211_change_iface+0x57/0x420 [ 118.017414][ T5110] cfg80211_change_iface+0x739/0xe10 [ 118.022771][ T5110] nl80211_set_interface+0x5b8/0x810 [ 118.028799][ T5110] ? nl80211_dump_interface+0x560/0x560 [ 118.034382][ T5110] ? mutex_lock_nested+0x17/0x20 [ 118.039405][ T5110] ? nl80211_pre_doit+0x27b/0x540 [ 118.044463][ T5110] genl_rcv_msg+0xd0b/0xfa0 [ 118.057301][ T5110] ? genl_bind+0x370/0x370 [ 118.061790][ T5110] ? __dev_queue_xmit+0x1b64/0x2e50 [ 118.067425][ T5110] ? verify_lock_unused+0x140/0x140 [ 118.072699][ T5110] ? dev_queue_xmit+0x20/0x20 [ 118.077562][ T5110] ? nl80211_dump_interface+0x560/0x560 [ 118.083217][ T5110] netlink_rcv_skb+0x1e9/0x430 [ 118.088796][ T5110] ? genl_bind+0x370/0x370 [ 118.093266][ T5110] ? netlink_ack+0xb10/0xb10 [ 118.098021][ T5110] ? down_read+0x1aa/0x2e0 [ 118.102617][ T5110] genl_rcv+0x24/0x40 [ 118.106822][ T5110] netlink_unicast+0x78f/0x940 [ 118.111648][ T5110] netlink_sendmsg+0x8ba/0xbe0 [ 118.116674][ T5110] ? netlink_getsockopt+0x570/0x570 [ 118.121989][ T5110] ? aa_sock_msg_perm+0x94/0x150 [ 118.127140][ T5110] ? apparmor_socket_sendmsg+0x88/0x230 [ 118.132796][ T5110] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 118.139144][ T5110] ? security_socket_sendmsg+0x7c/0xa0 [ 118.144715][ T5110] __sys_sendto+0x46d/0x620 [ 118.149454][ T5110] ? __ia32_sys_getpeername+0x80/0x80 [ 118.154974][ T5110] ? lock_chain_count+0x20/0x20 [ 118.159977][ T5110] __x64_sys_sendto+0xda/0xf0 [ 118.164774][ T5110] do_syscall_64+0x4c/0xa0 [ 118.169368][ T5110] ? clear_bhb_loop+0x30/0x80 [ 118.174157][ T5110] ? clear_bhb_loop+0x30/0x80 [ 118.179060][ T5110] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 118.185223][ T5110] RIP: 0033:0x7f563671194e [ 118.189869][ T5110] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 118.210451][ T5110] RSP: 002b:00007f56359b3de8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 118.219359][ T5110] RAX: ffffffffffffffda RBX: 00007f56359b56c0 RCX: 00007f563671194e [ 118.227500][ T5110] RDX: 0000000000000024 RSI: 00007f56359b3fe0 RDI: 0000000000000006 [ 118.235716][ T5110] RBP: 0000000000000000 R08: 00007f56359b3e64 R09: 000000000000000c [ 118.243836][ T5110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 118.252743][ T5110] R13: 0000000000000000 R14: 00007f56359b3fe0 R15: 0000000000000000 [ 118.261159][ T5110] [ 118.264303][ T5110] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 118.271784][ T5110] CPU: 0 PID: 5110 Comm: syz.0.51 Not tainted syzkaller #0 [ 118.279415][ T5110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 118.289544][ T5110] Call Trace: [ 118.292853][ T5110] [ 118.295815][ T5110] dump_stack_lvl+0x188/0x250 [ 118.300540][ T5110] ? show_regs_print_info+0x20/0x20 [ 118.305954][ T5110] ? load_image+0x410/0x410 [ 118.310509][ T5110] panic+0x2f8/0x850 [ 118.314468][ T5110] ? bpf_jit_dump+0xd0/0xd0 [ 118.319022][ T5110] ? ieee80211_start_next_roc+0x194/0x200 [ 118.324782][ T5110] __warn+0x248/0x2b0 [ 118.328893][ T5110] ? ieee80211_start_next_roc+0x194/0x200 [ 118.334653][ T5110] report_bug+0x1b9/0x2e0 [ 118.339115][ T5110] handle_bug+0x3a/0x70 [ 118.343306][ T5110] exc_invalid_op+0x16/0x40 [ 118.347846][ T5110] asm_exc_invalid_op+0x16/0x20 [ 118.352733][ T5110] RIP: 0010:ieee80211_start_next_roc+0x194/0x200 [ 118.359190][ T5110] Code: 3c 20 f8 48 89 df 4c 89 f6 48 89 c2 5b 41 5c 41 5e 41 5f 5d e9 2d 9d 0c 00 e8 78 31 31 f8 0f 0b e9 e6 fe ff ff e8 6c 31 31 f8 <0f> 0b e9 25 ff ff ff 48 c7 c1 84 41 8b 8d 80 e1 07 80 c1 03 38 c1 [ 118.378916][ T5110] RSP: 0018:ffffc900014ef2b8 EFLAGS: 00010293 [ 118.385032][ T5110] RAX: ffffffff8947cb44 RBX: ffff8880796b8e00 RCX: ffff888075e5d940 [ 118.393217][ T5110] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 118.401665][ T5110] RBP: 0000000000000001 R08: ffff888075c7d29f R09: 1ffff1100eb8fa53 [ 118.409934][ T5110] R10: dffffc0000000000 R11: ffffed100eb8fa54 R12: dffffc0000000000 [ 118.418039][ T5110] R13: 0000000000000000 R14: ffff88801eb9c220 R15: ffff8880796b963d [ 118.426150][ T5110] ? ieee80211_start_next_roc+0x194/0x200 [ 118.431926][ T5110] ? ieee80211_start_next_roc+0x194/0x200 [ 118.437692][ T5110] ieee80211_scan_cancel+0x141/0x5d0 [ 118.443016][ T5110] ieee80211_do_stop+0x19c/0x1d30 [ 118.448094][ T5110] ? ieee80211_sdata_stop+0x80/0x80 [ 118.453380][ T5110] ? ieee80211_stop_queues_by_reason+0x19c/0x220 [ 118.459742][ T5110] ? __might_sleep+0xf0/0xf0 [ 118.464364][ T5110] ? ieee80211_add_pending_skbs+0x2b0/0x2b0 [ 118.470291][ T5110] ? ieee80211_get_vif_queues+0x21d/0x390 [ 118.476230][ T5110] ieee80211_if_change_type+0x3e1/0x990 [ 118.481827][ T5110] ieee80211_change_iface+0x57/0x420 [ 118.487151][ T5110] cfg80211_change_iface+0x739/0xe10 [ 118.492481][ T5110] nl80211_set_interface+0x5b8/0x810 [ 118.497806][ T5110] ? nl80211_dump_interface+0x560/0x560 [ 118.503387][ T5110] ? mutex_lock_nested+0x17/0x20 [ 118.508360][ T5110] ? nl80211_pre_doit+0x27b/0x540 [ 118.513425][ T5110] genl_rcv_msg+0xd0b/0xfa0 [ 118.517973][ T5110] ? genl_bind+0x370/0x370 [ 118.522440][ T5110] ? __dev_queue_xmit+0x1b64/0x2e50 [ 118.525518][ T4256] Bluetooth: hci0: command 0x0419 tx timeout [ 118.527678][ T5110] ? verify_lock_unused+0x140/0x140 [ 118.527760][ T5110] ? dev_queue_xmit+0x20/0x20 [ 118.527786][ T5110] ? nl80211_dump_interface+0x560/0x560 [ 118.527859][ T5110] netlink_rcv_skb+0x1e9/0x430 [ 118.554020][ T5110] ? genl_bind+0x370/0x370 [ 118.558492][ T5110] ? netlink_ack+0xb10/0xb10 [ 118.563129][ T5110] ? down_read+0x1aa/0x2e0 [ 118.567589][ T5110] genl_rcv+0x24/0x40 [ 118.571604][ T5110] netlink_unicast+0x78f/0x940 [ 118.576417][ T5110] netlink_sendmsg+0x8ba/0xbe0 [ 118.581254][ T5110] ? netlink_getsockopt+0x570/0x570 [ 118.586478][ T5110] ? aa_sock_msg_perm+0x94/0x150 [ 118.591459][ T5110] ? apparmor_socket_sendmsg+0x88/0x230 [ 118.597208][ T5110] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 118.602531][ T5110] ? security_socket_sendmsg+0x7c/0xa0 [ 118.608032][ T5110] __sys_sendto+0x46d/0x620 [ 118.612617][ T5110] ? __ia32_sys_getpeername+0x80/0x80 [ 118.618053][ T5110] ? lock_chain_count+0x20/0x20 [ 118.623388][ T5110] __x64_sys_sendto+0xda/0xf0 [ 118.628215][ T5110] do_syscall_64+0x4c/0xa0 [ 118.632664][ T5110] ? clear_bhb_loop+0x30/0x80 [ 118.637368][ T5110] ? clear_bhb_loop+0x30/0x80 [ 118.642074][ T5110] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 118.647997][ T5110] RIP: 0033:0x7f563671194e [ 118.652441][ T5110] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 118.672424][ T5110] RSP: 002b:00007f56359b3de8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 118.680871][ T5110] RAX: ffffffffffffffda RBX: 00007f56359b56c0 RCX: 00007f563671194e [ 118.688876][ T5110] RDX: 0000000000000024 RSI: 00007f56359b3fe0 RDI: 0000000000000006 [ 118.696886][ T5110] RBP: 0000000000000000 R08: 00007f56359b3e64 R09: 000000000000000c [ 118.704894][ T5110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 118.712921][ T5110] R13: 0000000000000000 R14: 00007f56359b3fe0 R15: 0000000000000000 [ 118.721035][ T5110] [ 118.724677][ T5110] Kernel Offset: disabled [ 118.729172][ T5110] Rebooting in 86400 seconds..