Warning: Permanently added '10.128.1.155' (ED25519) to the list of known hosts. 2026/03/08 14:21:48 parsed 1 programs [ 115.914273][ T4717] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 117.856220][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.867092][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.875432][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 117.893849][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.901710][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.910621][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 118.754988][ T4751] chnl_net:caif_netlink_parms(): no params data found [ 118.819710][ T4751] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.827361][ T4751] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.836398][ T4751] device bridge_slave_0 entered promiscuous mode [ 118.845468][ T4751] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.852810][ T4751] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.861554][ T4751] device bridge_slave_1 entered promiscuous mode [ 118.892421][ T4751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.904273][ T4751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.935547][ T4751] team0: Port device team_slave_0 added [ 118.943779][ T4751] team0: Port device team_slave_1 added [ 118.975705][ T4751] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.982701][ T4751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.008898][ T4751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.022013][ T4751] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.029119][ T4751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.055783][ T4751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.095553][ T4751] device hsr_slave_0 entered promiscuous mode [ 119.102501][ T4751] device hsr_slave_1 entered promiscuous mode [ 119.775274][ T4751] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 119.832635][ T4751] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 119.855495][ T4751] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 119.880128][ T4751] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 119.971232][ T4751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.987399][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 119.997447][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 120.010260][ T4751] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.021718][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 120.033566][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 120.043621][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.050896][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.075028][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 120.084760][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 120.094034][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 120.102592][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.109766][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.120554][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 120.130520][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 120.139956][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 120.151119][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 120.165361][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 120.174800][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 120.183671][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 120.219835][ T4751] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 120.230656][ T4751] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 120.244925][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 120.254286][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 120.263119][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 120.274153][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 120.307628][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 120.464919][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 120.472570][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 120.509528][ T4751] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.533027][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 120.544434][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 120.566433][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 120.575060][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 120.587770][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 120.596306][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 120.606640][ T4751] device veth0_vlan entered promiscuous mode [ 120.638083][ T4751] device veth1_vlan entered promiscuous mode [ 120.665656][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 120.674637][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 120.683266][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 120.693322][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 120.707305][ T4751] device veth0_macvtap entered promiscuous mode [ 120.741004][ T4751] device veth1_macvtap entered promiscuous mode [ 120.759788][ T4751] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.768973][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 120.779519][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 120.788951][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 120.798313][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 120.810874][ T4751] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.820197][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 120.829730][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 120.851720][ T4751] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.861069][ T4751] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.871020][ T4751] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.880066][ T4751] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.483023][ T468] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/03/08 14:22:00 executed programs: 0 [ 123.722632][ T4922] chnl_net:caif_netlink_parms(): no params data found [ 123.782268][ T4922] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.789600][ T4922] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.798159][ T4922] device bridge_slave_0 entered promiscuous mode [ 123.807167][ T4922] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.814915][ T4922] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.823165][ T4922] device bridge_slave_1 entered promiscuous mode [ 123.851113][ T4922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.863031][ T4922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.894631][ T4922] team0: Port device team_slave_0 added [ 123.902729][ T4922] team0: Port device team_slave_1 added [ 123.927586][ T4922] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.934623][ T4922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.961101][ T4922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.974105][ T4922] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.981096][ T4922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.008814][ T4922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.058276][ T4922] device hsr_slave_0 entered promiscuous mode [ 124.066385][ T4922] device hsr_slave_1 entered promiscuous mode [ 124.073147][ T4922] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 124.081934][ T4922] Cannot create hsr debugfs directory [ 125.391356][ T468] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.460517][ T468] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.532923][ T468] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.654785][ T4280] Bluetooth: hci0: command 0x0409 tx timeout [ 126.495311][ T4922] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 126.508214][ T4922] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 126.518308][ T4922] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 126.532267][ T4922] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 126.647698][ T4922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.662259][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 126.670884][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 126.682973][ T4922] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.696687][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 126.706701][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 126.718100][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.725464][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.778507][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 126.788084][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 126.800142][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 126.811375][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.818538][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.828412][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 126.837688][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 126.847051][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 126.857873][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 126.878539][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 126.887382][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 126.899340][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 126.910997][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 126.922983][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 126.963642][ T4922] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 126.979963][ T4922] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 126.993470][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 127.007355][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 127.165849][ T468] device hsr_slave_0 left promiscuous mode [ 127.182087][ T468] device hsr_slave_1 left promiscuous mode [ 127.189231][ T468] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.197833][ T468] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.206872][ T468] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.214970][ T468] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.222833][ T468] device bridge_slave_1 left promiscuous mode [ 127.229861][ T468] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.239017][ T468] device bridge_slave_0 left promiscuous mode [ 127.245920][ T468] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.260489][ T468] device veth1_macvtap left promiscuous mode [ 127.267197][ T468] device veth0_macvtap left promiscuous mode [ 127.273325][ T468] device veth1_vlan left promiscuous mode [ 127.279725][ T468] device veth0_vlan left promiscuous mode [ 127.516261][ T468] team0 (unregistering): Port device team_slave_1 removed [ 127.534729][ T468] team0 (unregistering): Port device team_slave_0 removed [ 127.550548][ T468] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 127.566765][ T468] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 127.662381][ T468] bond0 (unregistering): Released all slaves [ 127.734164][ T1107] Bluetooth: hci0: command 0x041b tx timeout [ 127.763392][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 127.773537][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 127.787578][ T4922] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.840793][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 127.854735][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 127.875709][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 127.885316][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 127.896160][ T4922] device veth0_vlan entered promiscuous mode [ 127.910091][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 127.926317][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 127.951043][ T4922] device veth1_vlan entered promiscuous mode [ 127.976689][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 127.986927][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 127.996328][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 128.005314][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 128.016680][ T4922] device veth0_macvtap entered promiscuous mode [ 128.037947][ T4922] device veth1_macvtap entered promiscuous mode [ 128.072162][ T4922] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.080236][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 128.089266][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 128.097700][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 128.107132][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 128.119402][ T4922] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.127782][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 128.141836][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 128.164722][ T4922] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.173482][ T4922] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.183823][ T4922] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.192577][ T4922] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.285723][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.293595][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.315709][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 128.339582][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.349489][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.359876][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 2026/03/08 14:22:05 executed programs: 3 [ 129.813926][ T2285] Bluetooth: hci0: command 0x040f tx timeout [ 131.894240][ T1107] Bluetooth: hci0: command 0x0419 tx timeout [ 133.025676][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.036643][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.099892][ T5357] ------------[ cut here ]------------ [ 133.107029][ T5357] WARNING: CPU: 0 PID: 5357 at net/mac80211/offchannel.c:401 ieee80211_start_next_roc+0x194/0x200 [ 133.118442][ T5357] Modules linked in: [ 133.122613][ T5357] CPU: 1 PID: 5357 Comm: syz.0.123 Not tainted syzkaller #0 [ 133.130247][ T5357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 133.140520][ T5357] RIP: 0010:ieee80211_start_next_roc+0x194/0x200 [ 133.147363][ T5357] Code: 32 24 f8 48 89 df 4c 89 f6 48 89 c2 5b 41 5c 41 5e 41 5f 5d e9 2d a8 0c 00 e8 78 1d 35 f8 0f 0b e9 e6 fe ff ff e8 6c 1d 35 f8 <0f> 0b e9 25 ff ff ff 48 c7 c1 04 17 8a 8d 80 e1 07 80 c1 03 38 c1 [ 133.167999][ T5357] RSP: 0018:ffffc9000384f290 EFLAGS: 00010293 [ 133.174602][ T5357] RAX: ffffffff894403a4 RBX: ffff88805d1c8e40 RCX: ffff88807b140000 [ 133.182654][ T5357] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 133.190802][ T5357] RBP: 0000000000000001 R08: ffff88807f63d29f R09: 1ffff1100fec7a53 [ 133.199132][ T5357] R10: dffffc0000000000 R11: ffffed100fec7a54 R12: dffffc0000000000 [ 133.207306][ T5357] R13: 0000000000000000 R14: ffff8880210acaa0 R15: ffff88805d1c967d [ 133.215466][ T5357] FS: 00007f4de14e86c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 133.224652][ T5357] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 133.231365][ T5357] CR2: 00001c1e49c22020 CR3: 000000005c6bd000 CR4: 00000000003506e0 [ 133.239417][ T5357] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 133.247496][ T5357] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 133.256187][ T5357] Call Trace: [ 133.259498][ T5357] [ 133.262511][ T5357] ieee80211_scan_cancel+0x142/0x5d0 [ 133.267905][ T5357] ? ieee80211_do_stop+0x192/0x1d40 [ 133.273251][ T5357] ieee80211_do_stop+0x19c/0x1d40 [ 133.278735][ T5357] ? rcu_exp_sel_wait_wake+0x1b30/0x1b30 [ 133.284613][ T5357] ? ieee80211_sdata_stop+0x80/0x80 [ 133.289868][ T5357] ? ieee80211_stop_queues_by_reason+0x19c/0x220 [ 133.296380][ T5357] ? __might_sleep+0xf0/0xf0 [ 133.301022][ T5357] ? ieee80211_get_vif_queues+0x21d/0x390 [ 133.306861][ T5357] ieee80211_if_change_type+0x435/0x9c0 [ 133.312562][ T5357] ieee80211_change_iface+0x57/0x420 [ 133.318017][ T5357] cfg80211_change_iface+0x770/0xeb0 [ 133.323348][ T5357] nl80211_set_interface+0x5a7/0x7e0 [ 133.328767][ T5357] ? nl80211_dump_interface+0x5c0/0x5c0 [ 133.334512][ T5357] ? mutex_lock_nested+0x17/0x20 [ 133.339678][ T5357] genl_rcv_msg+0xcea/0xf90 [ 133.344339][ T5357] ? genl_bind+0x380/0x380 [ 133.348848][ T5357] ? __dev_queue_xmit+0x1cbf/0x2f80 [ 133.354153][ T5357] ? verify_lock_unused+0x140/0x140 [ 133.359408][ T5357] ? dev_queue_xmit+0x20/0x20 [ 133.364881][ T5357] ? nl80211_dump_interface+0x5c0/0x5c0 [ 133.370502][ T5357] netlink_rcv_skb+0x1f5/0x440 [ 133.375422][ T5357] ? genl_bind+0x380/0x380 [ 133.379972][ T5357] ? netlink_ack+0xb50/0xb50 [ 133.384718][ T5357] ? __lock_acquire+0x7d10/0x7d10 [ 133.389795][ T5357] ? down_read+0x1aa/0x2e0 [ 133.394300][ T5357] genl_rcv+0x24/0x40 [ 133.398309][ T5357] netlink_unicast+0x774/0x920 [ 133.403176][ T5357] netlink_sendmsg+0x8ba/0xbe0 [ 133.408048][ T5357] ? netlink_getsockopt+0x570/0x570 [ 133.413312][ T5357] ? aa_sock_msg_perm+0x94/0x150 [ 133.425137][ T5357] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 133.430496][ T5357] ? security_socket_sendmsg+0x7c/0xa0 [ 133.436073][ T5357] __sys_sendto+0x46d/0x620 [ 133.440617][ T5357] ? __ia32_sys_getpeername+0x80/0x80 [ 133.446245][ T5357] ? __lock_acquire+0x7d10/0x7d10 [ 133.451645][ T5357] ? lock_chain_count+0x20/0x20 [ 133.456787][ T5357] ? vtime_user_exit+0x2c8/0x3e0 [ 133.461811][ T5357] __x64_sys_sendto+0xda/0xf0 [ 133.466726][ T5357] do_syscall_64+0x4c/0xa0 [ 133.471429][ T5357] ? clear_bhb_loop+0x30/0x80 [ 133.476854][ T5357] ? clear_bhb_loop+0x30/0x80 [ 133.481714][ T5357] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 133.488010][ T5357] RIP: 0033:0x7f4de224494e [ 133.492480][ T5357] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 133.512767][ T5357] RSP: 002b:00007f4de14e6de8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 133.521511][ T5357] RAX: ffffffffffffffda RBX: 00007f4de14e86c0 RCX: 00007f4de224494e [ 133.529934][ T5357] RDX: 0000000000000024 RSI: 00007f4de14e6fe0 RDI: 0000000000000006 [ 133.537980][ T5357] RBP: 0000000000000000 R08: 00007f4de14e6e64 R09: 000000000000000c [ 133.546042][ T5357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 133.554131][ T5357] R13: 0000000000000000 R14: 00007f4de14e6fe0 R15: 0000000000000000 [ 133.562154][ T5357] [ 133.565436][ T5357] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 133.572758][ T5357] CPU: 1 PID: 5357 Comm: syz.0.123 Not tainted syzkaller #0 [ 133.580098][ T5357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 133.590184][ T5357] Call Trace: [ 133.593473][ T5357] [ 133.596415][ T5357] dump_stack_lvl+0x188/0x250 [ 133.601143][ T5357] ? show_regs_print_info+0x20/0x20 [ 133.606369][ T5357] ? load_image+0x400/0x400 [ 133.610890][ T5357] panic+0x2e5/0x810 [ 133.614987][ T5357] ? bpf_jit_dump+0xd0/0xd0 [ 133.619834][ T5357] ? ieee80211_start_next_roc+0x194/0x200 [ 133.625801][ T5357] __warn+0x248/0x2b0 [ 133.629841][ T5357] ? ieee80211_start_next_roc+0x194/0x200 [ 133.635620][ T5357] report_bug+0x1b7/0x2e0 [ 133.640017][ T5357] handle_bug+0x3a/0x70 [ 133.644294][ T5357] exc_invalid_op+0x16/0x40 [ 133.648815][ T5357] asm_exc_invalid_op+0x16/0x20 [ 133.653697][ T5357] RIP: 0010:ieee80211_start_next_roc+0x194/0x200 [ 133.660184][ T5357] Code: 32 24 f8 48 89 df 4c 89 f6 48 89 c2 5b 41 5c 41 5e 41 5f 5d e9 2d a8 0c 00 e8 78 1d 35 f8 0f 0b e9 e6 fe ff ff e8 6c 1d 35 f8 <0f> 0b e9 25 ff ff ff 48 c7 c1 04 17 8a 8d 80 e1 07 80 c1 03 38 c1 [ 133.679896][ T5357] RSP: 0018:ffffc9000384f290 EFLAGS: 00010293 [ 133.686015][ T5357] RAX: ffffffff894403a4 RBX: ffff88805d1c8e40 RCX: ffff88807b140000 [ 133.694009][ T5357] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 133.702004][ T5357] RBP: 0000000000000001 R08: ffff88807f63d29f R09: 1ffff1100fec7a53 [ 133.710120][ T5357] R10: dffffc0000000000 R11: ffffed100fec7a54 R12: dffffc0000000000 [ 133.718166][ T5357] R13: 0000000000000000 R14: ffff8880210acaa0 R15: ffff88805d1c967d [ 133.726172][ T5357] ? ieee80211_start_next_roc+0x194/0x200 [ 133.732191][ T5357] ieee80211_scan_cancel+0x142/0x5d0 [ 133.737496][ T5357] ? ieee80211_do_stop+0x192/0x1d40 [ 133.742882][ T5357] ieee80211_do_stop+0x19c/0x1d40 [ 133.748016][ T5357] ? rcu_exp_sel_wait_wake+0x1b30/0x1b30 [ 133.753762][ T5357] ? ieee80211_sdata_stop+0x80/0x80 [ 133.759177][ T5357] ? ieee80211_stop_queues_by_reason+0x19c/0x220 [ 133.765516][ T5357] ? __might_sleep+0xf0/0xf0 [ 133.770300][ T5357] ? ieee80211_get_vif_queues+0x21d/0x390 [ 133.776138][ T5357] ieee80211_if_change_type+0x435/0x9c0 [ 133.781722][ T5357] ieee80211_change_iface+0x57/0x420 [ 133.787124][ T5357] cfg80211_change_iface+0x770/0xeb0 [ 133.792664][ T5357] nl80211_set_interface+0x5a7/0x7e0 [ 133.798102][ T5357] ? nl80211_dump_interface+0x5c0/0x5c0 [ 133.803744][ T5357] ? mutex_lock_nested+0x17/0x20 [ 133.808842][ T5357] genl_rcv_msg+0xcea/0xf90 [ 133.813399][ T5357] ? genl_bind+0x380/0x380 [ 133.817950][ T5357] ? __dev_queue_xmit+0x1cbf/0x2f80 [ 133.823259][ T5357] ? verify_lock_unused+0x140/0x140 [ 133.828648][ T5357] ? dev_queue_xmit+0x20/0x20 [ 133.833376][ T5357] ? nl80211_dump_interface+0x5c0/0x5c0 [ 133.839191][ T5357] netlink_rcv_skb+0x1f5/0x440 [ 133.844320][ T5357] ? genl_bind+0x380/0x380 [ 133.848767][ T5357] ? netlink_ack+0xb50/0xb50 [ 133.853380][ T5357] ? __lock_acquire+0x7d10/0x7d10 [ 133.858435][ T5357] ? down_read+0x1aa/0x2e0 [ 133.862879][ T5357] genl_rcv+0x24/0x40 [ 133.866883][ T5357] netlink_unicast+0x774/0x920 [ 133.871667][ T5357] netlink_sendmsg+0x8ba/0xbe0 [ 133.876738][ T5357] ? netlink_getsockopt+0x570/0x570 [ 133.882067][ T5357] ? aa_sock_msg_perm+0x94/0x150 [ 133.887033][ T5357] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 133.892327][ T5357] ? security_socket_sendmsg+0x7c/0xa0 [ 133.897802][ T5357] __sys_sendto+0x46d/0x620 [ 133.902323][ T5357] ? __ia32_sys_getpeername+0x80/0x80 [ 133.907722][ T5357] ? __lock_acquire+0x7d10/0x7d10 [ 133.912822][ T5357] ? lock_chain_count+0x20/0x20 [ 133.917699][ T5357] ? vtime_user_exit+0x2c8/0x3e0 [ 133.923075][ T5357] __x64_sys_sendto+0xda/0xf0 [ 133.927803][ T5357] do_syscall_64+0x4c/0xa0 [ 133.932374][ T5357] ? clear_bhb_loop+0x30/0x80 [ 133.937063][ T5357] ? clear_bhb_loop+0x30/0x80 [ 133.941747][ T5357] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 133.947739][ T5357] RIP: 0033:0x7f4de224494e [ 133.952164][ T5357] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 133.971970][ T5357] RSP: 002b:00007f4de14e6de8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 133.980818][ T5357] RAX: ffffffffffffffda RBX: 00007f4de14e86c0 RCX: 00007f4de224494e [ 133.988855][ T5357] RDX: 0000000000000024 RSI: 00007f4de14e6fe0 RDI: 0000000000000006 [ 133.996836][ T5357] RBP: 0000000000000000 R08: 00007f4de14e6e64 R09: 000000000000000c [ 134.004819][ T5357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 134.012821][ T5357] R13: 0000000000000000 R14: 00007f4de14e6fe0 R15: 0000000000000000 [ 134.021079][ T5357] [ 134.024413][ T5357] Kernel Offset: disabled [ 134.028997][ T5357] Rebooting in 86400 seconds..