qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x328000)
[ 139.954860][ T1012] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1
[ 139.958056][ T1012] ata1: failed to read log page 10h (errno=-5)
[ 139.961403][ T1012] ata1.00: exception Emask 0x1 SAct 0x3000000 SErr 0x0 action 0x0
[ 139.974272][ T1012] ata1.00: irq_stat 0x40000000
[ 139.976590][ T1012] ata1.00: failed command: WRITE FPDMA QUEUED
[ 139.979572][ T1012] ata1.00: cmd 61/40:c0:b6:39:05/19:00:00:00:00/40 tag 24 ncq dma 3309568 ou
[ 139.979572][ T1012] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error)
[ 140.001741][ T1012] ata1.00: status: { DRDY }
[ 140.004801][ T1012] ata1.00: failed command: WRITE FPDMA QUEUED
[ 140.007671][ T1012] ata1.00: cmd 61/18:c8:f6:52:05/15:00:00:00:00/40 tag 25 ncq dma 2764800 ou
[ 140.007671][ T1012] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error)
[ 140.035252][ T1012] ata1.00: status: { DRDY }
[ 140.050161][ T1012] ata1.00: configured for UDMA/100
[ 140.063759][ T1012] ata1: EH complete
Warning: Permanently added '[localhost]:3939' (ED25519) to the list of known hosts.
[ 143.338649][ T1316] ieee802154 phy0 wpan0: encryption failed: -22
[ 143.342396][ T1316] ieee802154 phy1 wpan1: encryption failed: -22
2026/03/19 22:18:21 parsed 1 programs
Setting up swapspace version 1, size = 127995904 bytes
qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x8a000)
[ 147.104887][ T1012] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1
[ 147.108133][ T1012] ata1: failed to read log page 10h (errno=-5)
[ 147.110990][ T1012] ata1.00: NCQ disabled due to excessive errors
[ 147.136988][ T1012] ata1.00: exception Emask 0x1 SAct 0x40000001 SErr 0x0 action 0x0
[ 147.140797][ T1012] ata1.00: irq_stat 0x41000000
[ 147.142883][ T1012] ata1.00: failed command: WRITE FPDMA QUEUED
[ 147.155182][ T1012] ata1.00: cmd 61/48:00:4e:8d:05/06:00:00:00:00/40 tag 0 ncq dma 823296 out
[ 147.155182][ T1012] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error)
[ 147.183887][ T1012] ata1.00: status: { DRDY }
[ 147.186131][ T1012] ata1.00: failed command: WRITE FPDMA QUEUED
[ 147.188949][ T1012] ata1.00: cmd 61/50:f0:fe:88:05/04:00:00:00:00/40 tag 30 ncq dma 565248 out
[ 147.188949][ T1012] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error)
[ 147.234054][ T1012] ata1.00: status: { DRDY }
[ 147.244450][ T1012] ata1.00: configured for UDMA/100
[ 147.247099][ T1012] ata1: EH complete
[ 148.125441][ T5542] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 152.615121][ T5361] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 152.619855][ T5361] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 152.626189][ T5361] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 152.630986][ T5361] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 152.637941][ T5361] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 156.232132][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 156.245727][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 156.294958][ T1137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 156.298843][ T1137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 157.161791][ T5608] chnl_net:caif_netlink_parms(): no params data found
[ 157.270014][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state
[ 157.273190][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state
[ 157.283916][ T5608] bridge_slave_0: entered allmulticast mode
[ 157.288281][ T5608] bridge_slave_0: entered promiscuous mode
[ 157.298691][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state
[ 157.302797][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state
[ 157.306815][ T5608] bridge_slave_1: entered allmulticast mode
[ 157.310604][ T5608] bridge_slave_1: entered promiscuous mode
[ 157.337858][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 157.346541][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 157.375941][ T5608] team0: Port device team_slave_0 added
[ 157.381008][ T5608] team0: Port device team_slave_1 added
[ 157.401767][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 157.414556][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 157.443834][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 157.450937][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 157.463799][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 157.483850][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 157.547364][ T5608] hsr_slave_0: entered promiscuous mode
[ 157.550699][ T5608] hsr_slave_1: entered promiscuous mode
[ 158.124385][ T5608] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 158.146256][ T5608] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 158.163079][ T5608] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 158.185202][ T5608] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 158.232848][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state
[ 158.236583][ T5608] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 158.241054][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state
[ 158.244674][ T5608] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 158.316300][ T1103] bridge0: port 1(bridge_slave_0) entered disabled state
[ 158.321342][ T1103] bridge0: port 2(bridge_slave_1) entered disabled state
[ 158.443444][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0
[ 158.477410][ T5608] 8021q: adding VLAN 0 to HW filter on device team0
[ 158.500295][ T1103] bridge0: port 1(bridge_slave_0) entered blocking state
[ 158.503986][ T1103] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 158.521317][ T1103] bridge0: port 2(bridge_slave_1) entered blocking state
[ 158.524989][ T1103] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 159.001250][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 159.137950][ T5608] veth0_vlan: entered promiscuous mode
[ 159.158293][ T5608] veth1_vlan: entered promiscuous mode
[ 159.225609][ T5608] veth0_macvtap: entered promiscuous mode
[ 159.247063][ T5608] veth1_macvtap: entered promiscuous mode
[ 159.276105][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 159.292485][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 159.319609][ T1103] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 159.340364][ T1103] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 159.352695][ T1103] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 159.364061][ T1103] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 159.689498][ T1103] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 160.385337][ T1103] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 161.064805][ T1103] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2026/03/19 22:18:39 executed programs: 0
[ 161.715612][ T1103] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 161.750380][ T4671] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 161.756431][ T4671] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 161.764364][ T4671] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 161.769683][ T4671] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 161.775187][ T4671] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 162.046097][ T1103] bridge_slave_1: left allmulticast mode
[ 162.048725][ T1103] bridge_slave_1: left promiscuous mode
[ 162.051546][ T1103] bridge0: port 2(bridge_slave_1) entered disabled state
[ 162.075271][ T1103] bridge_slave_0: left allmulticast mode
[ 162.077773][ T1103] bridge_slave_0: left promiscuous mode
[ 162.080548][ T1103] bridge0: port 1(bridge_slave_0) entered disabled state
[ 162.250731][ T1103] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 162.258198][ T1103] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 162.263395][ T1103] bond0 (unregistering): Released all slaves
[ 162.335173][ T1103] hsr_slave_0: left promiscuous mode
[ 162.352386][ T1103] hsr_slave_1: left promiscuous mode
[ 162.365635][ T1103] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 162.370130][ T1103] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 162.389588][ T1103] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 162.393236][ T1103] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 162.414616][ T1103] veth1_macvtap: left promiscuous mode
[ 162.417588][ T1103] veth0_macvtap: left promiscuous mode
[ 162.420291][ T1103] veth1_vlan: left promiscuous mode
[ 162.422794][ T1103] veth0_vlan: left promiscuous mode
[ 162.907127][ T1103] team0 (unregistering): Port device team_slave_1 removed
[ 162.935777][ T1103] team0 (unregistering): Port device team_slave_0 removed
[ 163.417714][ T5689] chnl_net:caif_netlink_parms(): no params data found
[ 163.608223][ T5689] bridge0: port 1(bridge_slave_0) entered blocking state
[ 163.612898][ T5689] bridge0: port 1(bridge_slave_0) entered disabled state
[ 163.617078][ T5689] bridge_slave_0: entered allmulticast mode
[ 163.626722][ T5689] bridge_slave_0: entered promiscuous mode
[ 163.635605][ T5689] bridge0: port 2(bridge_slave_1) entered blocking state
[ 163.639898][ T5689] bridge0: port 2(bridge_slave_1) entered disabled state
[ 163.643235][ T5689] bridge_slave_1: entered allmulticast mode
[ 163.661980][ T5689] bridge_slave_1: entered promiscuous mode
[ 163.813910][ T4671] Bluetooth: hci0: command tx timeout
[ 163.992552][ T5689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 164.015461][ T5689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 164.078372][ T5689] team0: Port device team_slave_0 added
[ 164.088367][ T5689] team0: Port device team_slave_1 added
[ 164.153737][ T5689] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 164.157882][ T5689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 164.186891][ T5689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 164.204593][ T5689] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 164.208065][ T5689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 164.237697][ T5689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 164.336741][ T5689] hsr_slave_0: entered promiscuous mode
[ 164.340197][ T5689] hsr_slave_1: entered promiscuous mode
[ 164.938536][ T5689] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 164.950879][ T5689] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 164.968845][ T5689] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 164.986328][ T5689] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 165.135210][ T5689] 8021q: adding VLAN 0 to HW filter on device bond0
[ 165.157631][ T5689] 8021q: adding VLAN 0 to HW filter on device team0
[ 165.208822][ T1137] bridge0: port 1(bridge_slave_0) entered blocking state
[ 165.212224][ T1137] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 165.227640][ T1137] bridge0: port 2(bridge_slave_1) entered blocking state
[ 165.231069][ T1137] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 165.593356][ T5689] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 165.695640][ T5689] veth0_vlan: entered promiscuous mode
[ 165.712820][ T5689] veth1_vlan: entered promiscuous mode
[ 165.774943][ T5689] veth0_macvtap: entered promiscuous mode
[ 165.796251][ T5689] veth1_macvtap: entered promiscuous mode
[ 165.830664][ T5689] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 165.850446][ T5689] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 165.873397][ T1137] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 165.886024][ T1137] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 165.889942][ T1137] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 165.898263][ T4671] Bluetooth: hci0: command tx timeout
[ 165.920503][ T1137] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 166.042347][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 166.068714][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 166.107856][ T1137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 166.111407][ T1137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 166.199325][ T5760] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 166.208263][ T5760] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 166.218077][ T5760] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 166.225436][ T5760] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 166.232458][ T5760] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 166.245764][ T5406] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01)
[ 166.250107][ T5406] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
2026/03/19 22:18:44 executed programs: 3
[ 166.810802][ T5762] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 166.818422][ T1137] wlan1: authenticated
[ 166.820800][ T5448] wlan1: associating to AP 08:02:11:00:00:00 with corrupt probe response
[ 166.826830][ T5762] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 166.834818][ T1137] wlan1: associate with 08:02:11:00:00:00 (try 1/3)
[ 166.841127][ T1137] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1)
[ 166.845917][ T5762] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 166.852254][ T1137] wlan1: associated
[ 166.858959][ T5762] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 166.865511][ T37] ------------[ cut here ]------------
[ 166.868595][ T37] !cmp
[ 166.868610][ T37] WARNING: net/wireless/scan.c:1665 at cfg80211_rehash_bss+0x1e6/0x540, CPU#0: kworker/u4:3/37
[ 166.874885][ T37] Modules linked in:
[ 166.876756][ T37] CPU: 0 UID: 0 PID: 37 Comm: kworker/u4:3 Not tainted syzkaller #0 PREEMPT(full)
[ 166.880979][ T37] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 166.886313][ T37] Workqueue: events_unbound cfg80211_wiphy_work
[ 166.889384][ T37] RIP: 0010:cfg80211_rehash_bss+0x1e6/0x540
[ 166.892195][ T37] Code: e8 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 33 03 00 00 ff 45 00 48 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 90 <0f> 0b 90 4c 8b 2c 24 4c 89 ef e8 cb 0e bd f9 84 c0 74 78 e8 42 3e
[ 166.901609][ T37] RSP: 0018:ffffc900003f6f80 EFLAGS: 00010246
[ 166.904661][ T37] RAX: ffffffff8afd7145 RBX: 0000000000000000 RCX: 0000000000000000
[ 166.908326][ T37] RDX: ffff88801ebc4980 RSI: 0000000000000000 RDI: 0000000000000000
[ 166.912091][ T37] RBP: ffff88804491a868 R08: 0000000000000000 R09: 0000000000000002
[ 166.916332][ T37] R10: 0000000000000002 R11: 0000000000000000 R12: ffff888040dd01a0
[ 166.920420][ T37] R13: ffff88804491a430 R14: dffffc0000000000 R15: ffff888041447820
[ 166.923964][ T37] FS: 0000000000000000(0000) GS:ffff88808ca52000(0000) knlGS:0000000000000000
[ 166.927892][ T37] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 166.930831][ T37] CR2: 00007fd2208720c0 CR3: 0000000033ae9000 CR4: 0000000000352ef0
[ 166.935740][ T37] Call Trace:
[ 166.938077][ T37]
[ 166.939951][ T37] cfg80211_update_assoc_bss_entry+0x3fa/0x6a0
[ 166.942660][ T37] cfg80211_ch_switch_notify+0x3c1/0x7c0
[ 166.945162][ T37] ieee80211_sta_process_chanswitch+0xbba/0x2940
[ 166.947702][ T37] ? ieee80211_bss_info_update+0x7e9/0xa40
[ 166.950382][ T37] ? __pfx_ieee80211_sta_process_chanswitch+0x10/0x10
[ 166.953821][ T37] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 166.956354][ T37] ? __local_bh_enable_ip+0xd0/0x130
[ 166.959406][ T37] ieee80211_rx_mgmt_beacon+0x1e93/0x3350
[ 166.963069][ T37] ? __pfx_ieee80211_rx_mgmt_beacon+0x10/0x10
[ 166.965790][ T37] ? __dev_queue_xmit+0x1e78/0x3890
[ 166.968076][ T37] ? __lock_acquire+0x6b5/0x2cf0
[ 166.970262][ T37] ieee80211_sta_rx_queued_mgmt+0x53e/0x4740
[ 166.973109][ T37] ? __pfx_ieee80211_sta_rx_queued_mgmt+0x10/0x10
[ 166.976609][ T37] ? update_cfs_rq_load_avg+0x3fb/0x4e0
[ 166.979952][ T37] ? __lock_acquire+0x6b5/0x2cf0
[ 166.982789][ T37] ? update_cfs_rq_load_avg+0x3fb/0x4e0
[ 166.985407][ T37] ? __lock_acquire+0x6b5/0x2cf0
[ 166.987722][ T37] ? rcu_is_watching+0x15/0xb0
[ 166.989922][ T37] ? __lock_acquire+0x6b5/0x2cf0
[ 166.992364][ T37] ? do_raw_spin_lock+0x12b/0x2f0
[ 166.994904][ T37] ? kcov_remote_start+0x17f/0x7a0
[ 166.997954][ T37] ieee80211_iface_work+0x64b/0x1340
[ 167.001265][ T37] cfg80211_wiphy_work+0x2ab/0x4a0
[ 167.004063][ T37] ? process_scheduled_works+0xa8d/0x18c0
[ 167.006699][ T37] process_scheduled_works+0xb6e/0x18c0
[ 167.009154][ T37] ? __pfx_process_scheduled_works+0x10/0x10
[ 167.011995][ T37] ? assign_work+0x3d5/0x5e0
[ 167.014243][ T37] worker_thread+0xa53/0xfc0
[ 167.016419][ T37] kthread+0x388/0x470
[ 167.018314][ T37] ? __pfx_worker_thread+0x10/0x10
[ 167.021299][ T37] ? __pfx_kthread+0x10/0x10
[ 167.024092][ T37] ret_from_fork+0x51e/0xb90
[ 167.026619][ T37] ? __pfx_ret_from_fork+0x10/0x10
[ 167.029169][ T37] ? __switch_to+0xc7d/0x1450
[ 167.031372][ T37] ? __pfx_kthread+0x10/0x10
[ 167.033943][ T37] ret_from_fork_asm+0x1a/0x30
[ 167.036441][ T37]
[ 167.037961][ T37] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 167.041410][ T37] CPU: 0 UID: 0 PID: 37 Comm: kworker/u4:3 Not tainted syzkaller #0 PREEMPT(full)
[ 167.046351][ T37] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 167.051541][ T37] Workqueue: events_unbound cfg80211_wiphy_work
[ 167.054590][ T37] Call Trace:
[ 167.056202][ T37]
[ 167.057530][ T37] vpanic+0x56c/0xa60
[ 167.059292][ T37] ? __pfx__printk+0x10/0x10
[ 167.061693][ T37] ? __pfx_vpanic+0x10/0x10
[ 167.064130][ T37] ? is_bpf_text_address+0x292/0x2b0
[ 167.066968][ T37] ? is_bpf_text_address+0x26/0x2b0
[ 167.069477][ T37] panic+0xc5/0xd0
[ 167.071073][ T37] ? __pfx_panic+0x10/0x10
[ 167.073007][ T37] ? ret_from_fork_asm+0x1a/0x30
[ 167.075170][ T37] __warn+0x315/0x4f0
[ 167.077079][ T37] ? cfg80211_rehash_bss+0x1e6/0x540
[ 167.079932][ T37] ? cfg80211_rehash_bss+0x1e6/0x540
[ 167.082994][ T37] __report_bug+0x29a/0x540
[ 167.085218][ T37] ? cfg80211_rehash_bss+0x1e6/0x540
[ 167.087531][ T37] ? __pfx___report_bug+0x10/0x10
[ 167.089805][ T37] ? _ieee80211_wake_txqs+0x90a/0xa70
[ 167.092657][ T37] ? __lock_acquire+0x6b5/0x2cf0
[ 167.095145][ T37] ? cfg80211_rehash_bss+0x1e6/0x540
[ 167.098476][ T37] report_bug+0x16a/0x220
[ 167.101009][ T37] ? cfg80211_rehash_bss+0x1e6/0x540
[ 167.103497][ T37] ? cfg80211_rehash_bss+0x1e8/0x540
[ 167.105961][ T37] handle_bug+0x9c/0x200
[ 167.107843][ T37] exc_invalid_op+0x1a/0x50
[ 167.109851][ T37] asm_exc_invalid_op+0x1a/0x20
[ 167.112061][ T37] RIP: 0010:cfg80211_rehash_bss+0x1e6/0x540
[ 167.114950][ T37] Code: e8 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 33 03 00 00 ff 45 00 48 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 90 <0f> 0b 90 4c 8b 2c 24 4c 89 ef e8 cb 0e bd f9 84 c0 74 78 e8 42 3e
[ 167.126700][ T37] RSP: 0018:ffffc900003f6f80 EFLAGS: 00010246
[ 167.129933][ T37] RAX: ffffffff8afd7145 RBX: 0000000000000000 RCX: 0000000000000000
[ 167.133473][ T37] RDX: ffff88801ebc4980 RSI: 0000000000000000 RDI: 0000000000000000
[ 167.137191][ T37] RBP: ffff88804491a868 R08: 0000000000000000 R09: 0000000000000002
[ 167.140611][ T37] R10: 0000000000000002 R11: 0000000000000000 R12: ffff888040dd01a0
[ 167.144407][ T37] R13: ffff88804491a430 R14: dffffc0000000000 R15: ffff888041447820
[ 167.148868][ T37] ? cfg80211_rehash_bss+0xe5/0x540
[ 167.151556][ T37] cfg80211_update_assoc_bss_entry+0x3fa/0x6a0
[ 167.154584][ T37] cfg80211_ch_switch_notify+0x3c1/0x7c0
[ 167.157064][ T37] ieee80211_sta_process_chanswitch+0xbba/0x2940
[ 167.159824][ T37] ? ieee80211_bss_info_update+0x7e9/0xa40
[ 167.163103][ T37] ? __pfx_ieee80211_sta_process_chanswitch+0x10/0x10
[ 167.167185][ T37] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 167.169877][ T37] ? __local_bh_enable_ip+0xd0/0x130
[ 167.172288][ T37] ieee80211_rx_mgmt_beacon+0x1e93/0x3350
[ 167.174762][ T37] ? __pfx_ieee80211_rx_mgmt_beacon+0x10/0x10
[ 167.177407][ T37] ? __dev_queue_xmit+0x1e78/0x3890
[ 167.180226][ T37] ? __lock_acquire+0x6b5/0x2cf0
[ 167.183021][ T37] ieee80211_sta_rx_queued_mgmt+0x53e/0x4740
[ 167.186008][ T37] ? __pfx_ieee80211_sta_rx_queued_mgmt+0x10/0x10
[ 167.188962][ T37] ? update_cfs_rq_load_avg+0x3fb/0x4e0
[ 167.191443][ T37] ? __lock_acquire+0x6b5/0x2cf0
[ 167.193705][ T37] ? update_cfs_rq_load_avg+0x3fb/0x4e0
[ 167.197199][ T37] ? __lock_acquire+0x6b5/0x2cf0
[ 167.200620][ T37] ? rcu_is_watching+0x15/0xb0
[ 167.203393][ T37] ? __lock_acquire+0x6b5/0x2cf0
[ 167.206096][ T37] ? do_raw_spin_lock+0x12b/0x2f0
[ 167.208667][ T37] ? kcov_remote_start+0x17f/0x7a0
[ 167.211354][ T37] ieee80211_iface_work+0x64b/0x1340
[ 167.213797][ T37] cfg80211_wiphy_work+0x2ab/0x4a0
[ 167.216240][ T37] ? process_scheduled_works+0xa8d/0x18c0
[ 167.218897][ T37] process_scheduled_works+0xb6e/0x18c0
[ 167.221538][ T37] ? __pfx_process_scheduled_works+0x10/0x10
[ 167.224295][ T37] ? assign_work+0x3d5/0x5e0
[ 167.226427][ T37] worker_thread+0xa53/0xfc0
[ 167.228577][ T37] kthread+0x388/0x470
[ 167.230379][ T37] ? __pfx_worker_thread+0x10/0x10
[ 167.232735][ T37] ? __pfx_kthread+0x10/0x10
[ 167.234885][ T37] ret_from_fork+0x51e/0xb90
[ 167.236970][ T37] ? __pfx_ret_from_fork+0x10/0x10
[ 167.239186][ T37] ? __switch_to+0xc7d/0x1450
[ 167.241405][ T37] ? __pfx_kthread+0x10/0x10
[ 167.244087][ T37] ret_from_fork_asm+0x1a/0x30
[ 167.246182][ T37]
[ 167.247935][ T37] Kernel Offset: disabled
[ 167.250070][ T37] Rebooting in 86400 seconds..