Warning: Permanently added '10.128.1.171' (ED25519) to the list of known hosts. 2026/04/09 12:16:02 parsed 1 programs [ 114.452664][ T6184] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 119.241044][ T6241] chnl_net:caif_netlink_parms(): no params data found [ 119.306349][ T6241] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.313666][ T6241] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.320978][ T6241] bridge_slave_0: entered allmulticast mode [ 119.328368][ T6241] bridge_slave_0: entered promiscuous mode [ 119.336284][ T6241] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.343654][ T6241] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.351031][ T6241] bridge_slave_1: entered allmulticast mode [ 119.359033][ T6241] bridge_slave_1: entered promiscuous mode [ 119.386102][ T6241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.398849][ T6241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.430790][ T6241] team0: Port device team_slave_0 added [ 119.438505][ T6241] team0: Port device team_slave_1 added [ 119.462234][ T6241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.470414][ T6241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.496766][ T6241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.538579][ T6241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.545553][ T6241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.572475][ T6241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.611924][ T6241] hsr_slave_0: entered promiscuous mode [ 119.618489][ T6241] hsr_slave_1: entered promiscuous mode [ 120.195624][ T6241] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 120.211781][ T6241] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 120.229620][ T6241] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 120.255261][ T6241] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 120.365348][ T6241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.389152][ T6241] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.402589][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.409881][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.426540][ T3558] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.433752][ T3558] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.673843][ T6241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.731545][ T6241] veth0_vlan: entered promiscuous mode [ 120.748536][ T6241] veth1_vlan: entered promiscuous mode [ 120.789535][ T6241] veth0_macvtap: entered promiscuous mode [ 120.801232][ T6241] veth1_macvtap: entered promiscuous mode [ 120.826002][ T6241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.845193][ T6241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.864887][ T1150] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.883432][ T1150] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.918273][ T1150] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.944377][ T1150] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.098304][ T1150] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.188602][ T1150] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.290271][ T1150] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.341139][ T5893] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 121.351527][ T5893] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 121.363475][ T5893] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 121.372720][ T5893] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 121.381923][ T5893] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 121.412779][ T1150] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.752992][ T1177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.764605][ T1177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.807993][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.819097][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/04/09 12:16:14 executed programs: 0 [ 122.644093][ T5893] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 122.656828][ T5893] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 122.667911][ T5893] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 122.678111][ T5893] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 122.685911][ T5893] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 122.902217][ T6357] chnl_net:caif_netlink_parms(): no params data found [ 123.008729][ T6357] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.016043][ T6357] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.023351][ T6357] bridge_slave_0: entered allmulticast mode [ 123.031933][ T6357] bridge_slave_0: entered promiscuous mode [ 123.041039][ T6357] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.048338][ T6357] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.055609][ T6357] bridge_slave_1: entered allmulticast mode [ 123.064010][ T6357] bridge_slave_1: entered promiscuous mode [ 123.105476][ T6357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.118281][ T6357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.161434][ T6357] team0: Port device team_slave_0 added [ 123.171172][ T6357] team0: Port device team_slave_1 added [ 123.210790][ T6357] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.218144][ T6357] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.244792][ T6357] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.262190][ T6357] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.269779][ T6357] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.303262][ T6357] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.373247][ T6357] hsr_slave_0: entered promiscuous mode [ 123.381821][ T6357] hsr_slave_1: entered promiscuous mode [ 123.388912][ T6357] debugfs: 'hsr0' already exists in 'hsr' [ 123.394740][ T6357] Cannot create hsr debugfs directory [ 123.624433][ T1150] bridge_slave_1: left allmulticast mode [ 123.630558][ T1150] bridge_slave_1: left promiscuous mode [ 123.638085][ T1150] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.651651][ T1150] bridge_slave_0: left allmulticast mode [ 123.657548][ T1150] bridge_slave_0: left promiscuous mode [ 123.663390][ T1150] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.841998][ T1150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 123.854535][ T1150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 123.865528][ T1150] bond0 (unregistering): Released all slaves [ 124.028658][ T1150] hsr_slave_0: left promiscuous mode [ 124.040000][ T1150] hsr_slave_1: left promiscuous mode [ 124.055737][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.065789][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.074203][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.082267][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.097088][ T1150] veth1_macvtap: left promiscuous mode [ 124.103119][ T1150] veth0_macvtap: left promiscuous mode [ 124.108824][ T1150] veth1_vlan: left promiscuous mode [ 124.114141][ T1150] veth0_vlan: left promiscuous mode [ 124.383460][ T1150] team0 (unregistering): Port device team_slave_1 removed [ 124.402144][ T1150] team0 (unregistering): Port device team_slave_0 removed [ 124.767815][ T5164] Bluetooth: hci0: command tx timeout [ 124.979308][ T6357] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 124.992555][ T6357] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 125.023175][ T6357] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 125.239360][ T6357] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 125.531642][ T6357] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.574487][ T6357] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.620791][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.627993][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.643859][ T1177] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.651071][ T1177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.932464][ T6357] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.994114][ T6357] veth0_vlan: entered promiscuous mode [ 126.012716][ T6357] veth1_vlan: entered promiscuous mode [ 126.054038][ T6357] veth0_macvtap: entered promiscuous mode [ 126.069057][ T6357] veth1_macvtap: entered promiscuous mode [ 126.092532][ T6357] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.111031][ T6357] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.127108][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.138395][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.153589][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.163746][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.241410][ T1177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.254477][ T1177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.276194][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.285345][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.322448][ T6467] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16'. [ 126.354952][ T6469] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17'. [ 126.382924][ T6471] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18'. [ 126.410180][ T6473] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19'. [ 126.435406][ T6475] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20'. [ 126.464058][ T6477] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21'. [ 126.490190][ T6479] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22'. [ 126.515044][ T6481] netlink: 4 bytes leftover after parsing attributes in process `syz.0.23'. [ 126.542996][ T6483] netlink: 4 bytes leftover after parsing attributes in process `syz.0.24'. [ 126.573503][ T6485] netlink: 4 bytes leftover after parsing attributes in process `syz.0.25'. [ 126.848118][ T5164] Bluetooth: hci0: command tx timeout 2026/04/09 12:16:19 executed programs: 62 [ 128.928791][ T5164] Bluetooth: hci0: command tx timeout [ 130.530894][ T49] ------------[ cut here ]------------ [ 130.536437][ T49] roc->started [ 130.536459][ T49] WARNING: net/mac80211/offchannel.c:404 at ieee80211_start_next_roc+0x1d8/0x240, CPU#0: kworker/u8:3/49 [ 130.552198][ T49] Modules linked in: [ 130.556606][ T49] CPU: 0 UID: 0 PID: 49 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) [ 130.566363][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 130.576884][ T49] Workqueue: events_unbound cfg80211_wiphy_work [ 130.583566][ T49] RIP: 0010:ieee80211_start_next_roc+0x1d8/0x240 [ 130.590238][ T49] Code: 4c 89 f7 48 89 de 48 89 c2 5b 41 5c 41 5e 41 5f 5d e9 2c 53 da ff e8 c7 83 a7 f6 90 0f 0b 90 e9 c1 fe ff ff e8 b9 83 a7 f6 90 <0f> 0b 90 e9 fe fe ff ff 48 c7 c1 c0 48 32 90 80 e1 07 80 c1 03 38 [ 130.610833][ T49] RSP: 0018:ffffc90000b97a60 EFLAGS: 00010293 [ 130.617575][ T49] RAX: ffffffff8b1e1237 RBX: ffff88807de60f20 RCX: ffff88801b715c40 [ 130.625569][ T49] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 130.633670][ T49] RBP: 0000000000000001 R08: ffffffff903215f7 R09: 1ffffffff20642be [ 130.641695][ T49] R10: dffffc0000000000 R11: fffffbfff20642bf R12: dffffc0000000000 [ 130.649766][ T49] R13: ffff88807de606c0 R14: ffff888027a6bf20 R15: ffff88807de616c6 [ 130.657785][ T49] FS: 0000000000000000(0000) GS:ffff88812524a000(0000) knlGS:0000000000000000 [ 130.666820][ T49] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 130.673663][ T49] CR2: 00007f036a982800 CR3: 00000000347c4000 CR4: 00000000003526f0 [ 130.681804][ T49] Call Trace: [ 130.685113][ T49] [ 130.688325][ T49] cfg80211_wiphy_work+0x2cf/0x460 [ 130.693639][ T49] ? process_scheduled_works+0xa70/0x1860 [ 130.699902][ T49] process_scheduled_works+0xb5d/0x1860 [ 130.705603][ T49] ? __pfx_process_scheduled_works+0x10/0x10 [ 130.711644][ T49] ? assign_work+0x3d5/0x5e0 [ 130.716371][ T49] worker_thread+0xa53/0xfc0 [ 130.721149][ T49] kthread+0x388/0x470 [ 130.725243][ T49] ? __pfx_worker_thread+0x10/0x10 [ 130.730413][ T49] ? __pfx_kthread+0x10/0x10 [ 130.735032][ T49] ret_from_fork+0x514/0xb70 [ 130.739697][ T49] ? __pfx_ret_from_fork+0x10/0x10 [ 130.744847][ T49] ? __switch_to+0xc79/0x1410 [ 130.749846][ T49] ? __pfx_kthread+0x10/0x10 [ 130.754493][ T49] ret_from_fork_asm+0x1a/0x30 [ 130.759333][ T49] [ 130.762479][ T49] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 130.769951][ T49] CPU: 0 UID: 0 PID: 49 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) [ 130.779234][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 130.789403][ T49] Workqueue: events_unbound cfg80211_wiphy_work [ 130.795805][ T49] Call Trace: [ 130.799080][ T49] [ 130.802004][ T49] vpanic+0x56c/0xa60 [ 130.806020][ T49] ? __pfx__printk+0x10/0x10 [ 130.810714][ T49] ? __pfx_vpanic+0x10/0x10 [ 130.815313][ T49] ? is_bpf_text_address+0x292/0x2b0 [ 130.820597][ T49] ? is_bpf_text_address+0x26/0x2b0 [ 130.825812][ T49] panic+0xc5/0xd0 [ 130.829629][ T49] ? __pfx_panic+0x10/0x10 [ 130.834047][ T49] ? ret_from_fork_asm+0x1a/0x30 [ 130.839094][ T49] __warn+0x315/0x4c0 [ 130.843164][ T49] ? ieee80211_start_next_roc+0x1d8/0x240 [ 130.849237][ T49] ? ieee80211_start_next_roc+0x1d8/0x240 [ 130.854984][ T49] __report_bug+0x29a/0x540 [ 130.859672][ T49] ? ieee80211_start_next_roc+0x1d8/0x240 [ 130.865408][ T49] ? __pfx___report_bug+0x10/0x10 [ 130.870617][ T49] ? do_raw_spin_lock+0x12b/0x2f0 [ 130.875730][ T49] ? do_raw_spin_lock+0x12b/0x2f0 [ 130.880841][ T49] ? ieee80211_start_next_roc+0x1d8/0x240 [ 130.886567][ T49] report_bug+0x16a/0x220 [ 130.890899][ T49] ? ieee80211_start_next_roc+0x1d8/0x240 [ 130.896723][ T49] ? ieee80211_start_next_roc+0x1da/0x240 [ 130.902502][ T49] handle_bug+0x9c/0x200 [ 130.907036][ T49] exc_invalid_op+0x1a/0x50 [ 130.911804][ T49] asm_exc_invalid_op+0x1a/0x20 [ 130.916661][ T49] RIP: 0010:ieee80211_start_next_roc+0x1d8/0x240 [ 130.922995][ T49] Code: 4c 89 f7 48 89 de 48 89 c2 5b 41 5c 41 5e 41 5f 5d e9 2c 53 da ff e8 c7 83 a7 f6 90 0f 0b 90 e9 c1 fe ff ff e8 b9 83 a7 f6 90 <0f> 0b 90 e9 fe fe ff ff 48 c7 c1 c0 48 32 90 80 e1 07 80 c1 03 38 [ 130.943208][ T49] RSP: 0018:ffffc90000b97a60 EFLAGS: 00010293 [ 130.949362][ T49] RAX: ffffffff8b1e1237 RBX: ffff88807de60f20 RCX: ffff88801b715c40 [ 130.957412][ T49] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 130.965556][ T49] RBP: 0000000000000001 R08: ffffffff903215f7 R09: 1ffffffff20642be [ 130.973521][ T49] R10: dffffc0000000000 R11: fffffbfff20642bf R12: dffffc0000000000 [ 130.981484][ T49] R13: ffff88807de606c0 R14: ffff888027a6bf20 R15: ffff88807de616c6 [ 130.989635][ T49] ? ieee80211_start_next_roc+0x1d7/0x240 [ 130.995475][ T49] cfg80211_wiphy_work+0x2cf/0x460 [ 131.000597][ T49] ? process_scheduled_works+0xa70/0x1860 [ 131.006318][ T49] process_scheduled_works+0xb5d/0x1860 [ 131.011901][ T49] ? __pfx_process_scheduled_works+0x10/0x10 [ 131.017902][ T49] ? assign_work+0x3d5/0x5e0 [ 131.022585][ T49] worker_thread+0xa53/0xfc0 [ 131.027196][ T49] kthread+0x388/0x470 [ 131.031263][ T49] ? __pfx_worker_thread+0x10/0x10 [ 131.036507][ T49] ? __pfx_kthread+0x10/0x10 [ 131.041094][ T49] ret_from_fork+0x514/0xb70 [ 131.045785][ T49] ? __pfx_ret_from_fork+0x10/0x10 [ 131.051018][ T49] ? __switch_to+0xc79/0x1410 [ 131.055699][ T49] ? __pfx_kthread+0x10/0x10 [ 131.060283][ T49] ret_from_fork_asm+0x1a/0x30 [ 131.065137][ T49] [ 131.068515][ T49] Kernel Offset: disabled [ 131.072855][ T49] Rebooting in 86400 seconds..