Warning: Permanently added '10.128.0.134' (ED25519) to the list of known hosts. 2026/01/05 16:59:05 parsed 1 programs [ 233.359227][ T5835] cgroup: Unknown subsys name 'net' [ 233.599460][ T5835] cgroup: Unknown subsys name 'cpuset' [ 233.655725][ T5835] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 235.246102][ T5835] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 239.048326][ T147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.048351][ T147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.128666][ T3496] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.128687][ T3496] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.402574][ T5882] chnl_net:caif_netlink_parms(): no params data found [ 241.847070][ T5882] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.848615][ T5882] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.848769][ T5882] bridge_slave_0: entered allmulticast mode [ 241.850299][ T5882] bridge_slave_0: entered promiscuous mode [ 241.855624][ T5882] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.856590][ T5882] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.856740][ T5882] bridge_slave_1: entered allmulticast mode [ 241.859121][ T5882] bridge_slave_1: entered promiscuous mode [ 242.158559][ T5882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.161152][ T5882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.387295][ T5882] team0: Port device team_slave_0 added [ 242.410833][ T5882] team0: Port device team_slave_1 added [ 242.548219][ T5882] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.548236][ T5882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 242.548260][ T5882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 242.552544][ T5882] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.552559][ T5882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 242.552583][ T5882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.881854][ T5882] hsr_slave_0: entered promiscuous mode [ 242.882867][ T5882] hsr_slave_1: entered promiscuous mode [ 243.261506][ T5882] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 243.282390][ T5882] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 243.320189][ T5882] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 243.358474][ T5882] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 243.483027][ T5882] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.503581][ T5882] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.516984][ T3454] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.517523][ T3454] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.520321][ T3454] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.520402][ T3454] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.732369][ T5882] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.793355][ T5882] veth0_vlan: entered promiscuous mode [ 243.810137][ T5882] veth1_vlan: entered promiscuous mode [ 243.839845][ T5882] veth0_macvtap: entered promiscuous mode [ 243.843077][ T5882] veth1_macvtap: entered promiscuous mode [ 243.874607][ T5882] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.891066][ T5882] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.904376][ T3454] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.909078][ T3454] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.909272][ T3454] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.909306][ T3454] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.640036][ T3454] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.886993][ T3454] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.097172][ T3454] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.341024][ T3454] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.169780][ T5928] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 246.171252][ T5928] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 246.171972][ T5928] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 246.173020][ T5928] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 246.173704][ T5928] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 247.175394][ T3454] bridge_slave_1: left allmulticast mode [ 247.175485][ T3454] bridge_slave_1: left promiscuous mode [ 247.176906][ T3454] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.337200][ T3454] bridge_slave_0: left allmulticast mode [ 247.337227][ T3454] bridge_slave_0: left promiscuous mode [ 247.337470][ T3454] bridge0: port 1(bridge_slave_0) entered disabled state 2026/01/05 16:59:22 executed programs: 0 [ 248.078948][ T5928] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 248.082424][ T5928] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 248.083241][ T5928] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 248.084373][ T5928] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 248.107913][ T5928] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 249.267962][ T3454] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 249.345723][ T3454] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 249.387383][ T3454] bond0 (unregistering): Released all slaves [ 249.735897][ T3454] hsr_slave_0: left promiscuous mode [ 249.775223][ T3454] hsr_slave_1: left promiscuous mode [ 249.776415][ T3454] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.776478][ T3454] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.827099][ T3454] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.827124][ T3454] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.921223][ T3454] veth1_macvtap: left promiscuous mode [ 249.921378][ T3454] veth0_macvtap: left promiscuous mode [ 249.921543][ T3454] veth1_vlan: left promiscuous mode [ 249.922609][ T3454] veth0_vlan: left promiscuous mode [ 250.136712][ T61] Bluetooth: hci0: command tx timeout [ 251.955674][ T3454] team0 (unregistering): Port device team_slave_1 removed [ 252.155712][ T3454] team0 (unregistering): Port device team_slave_0 removed [ 252.215180][ T61] Bluetooth: hci0: command tx timeout [ 254.220604][ T5959] chnl_net:caif_netlink_parms(): no params data found [ 254.296067][ T61] Bluetooth: hci0: command tx timeout [ 254.578833][ T5959] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.579050][ T5959] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.579238][ T5959] bridge_slave_0: entered allmulticast mode [ 254.581871][ T5959] bridge_slave_0: entered promiscuous mode [ 254.626612][ T5959] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.626807][ T5959] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.627016][ T5959] bridge_slave_1: entered allmulticast mode [ 254.629563][ T5959] bridge_slave_1: entered promiscuous mode [ 254.827450][ T5959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.830575][ T5959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.009536][ T5959] team0: Port device team_slave_0 added [ 255.013170][ T5959] team0: Port device team_slave_1 added [ 255.269128][ T5959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.269143][ T5959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 255.269167][ T5959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.272226][ T5959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.272239][ T5959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 255.272261][ T5959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.541380][ T5959] hsr_slave_0: entered promiscuous mode [ 255.542177][ T5959] hsr_slave_1: entered promiscuous mode [ 255.663327][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.663418][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.375454][ T61] Bluetooth: hci0: command tx timeout [ 257.748391][ T5959] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 257.785795][ T5959] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 257.822360][ T5959] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 257.860712][ T5959] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 258.018839][ T5959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.042122][ T5959] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.052754][ T147] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.054053][ T147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.063945][ T3576] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.066251][ T3576] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.391633][ T5959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.463084][ T5959] veth0_vlan: entered promiscuous mode [ 258.472138][ T5959] veth1_vlan: entered promiscuous mode [ 258.521966][ T5959] veth0_macvtap: entered promiscuous mode [ 258.536931][ T5959] veth1_macvtap: entered promiscuous mode [ 258.563667][ T5959] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.577727][ T5959] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.592963][ T3576] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.593748][ T3576] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.594495][ T3576] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.594533][ T3576] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.821345][ T3576] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.821363][ T3576] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.873760][ T3454] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.873780][ T3454] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/01/05 16:59:33 executed programs: 2 [ 259.183297][ T6094] warning: `syz.0.17' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 259.195234][ T6089] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 259.247096][ T3576] ------------[ cut here ]------------ [ 259.247118][ T3576] WARNING: net/wireless/scan.c:1194 at cfg80211_scan_done+0x2d5/0x460, CPU#0: kworker/u8:15/3576 [ 259.247168][ T3576] Modules linked in: [ 259.247204][ T3576] CPU: 0 UID: 0 PID: 3576 Comm: kworker/u8:15 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 259.247225][ T3576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 259.247237][ T3576] Workqueue: events_unbound cfg80211_wiphy_work [ 259.247264][ T3576] RIP: 0010:cfg80211_scan_done+0x2d5/0x460 [ 259.247291][ T3576] Code: 75 7b 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 7a 8a 9c f7 90 0f 0b 90 e9 25 fe ff ff e8 6c 8a 9c f7 90 <0f> 0b 90 e9 db fe ff ff e8 5e 8a 9c f7 48 8d 3d f7 43 c7 04 67 48 [ 259.247307][ T3576] RSP: 0018:ffffc9000d2e78e0 EFLAGS: 00010293 [ 259.247323][ T3576] RAX: ffffffff8a2321c4 RBX: ffff88802e603618 RCX: ffff88803083dac0 [ 259.247337][ T3576] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 259.247349][ T3576] RBP: ffffc9000d2e79a8 R08: 0000000000000000 R09: 0000000000000000 [ 259.247361][ T3576] R10: dffffc0000000000 R11: fffffbfff1db66ef R12: ffff88802e603600 [ 259.247375][ T3576] R13: ffff88802e603678 R14: dffffc0000000000 R15: ffff888031c10860 [ 259.247390][ T3576] FS: 0000000000000000(0000) GS:ffff888126cef000(0000) knlGS:0000000000000000 [ 259.247405][ T3576] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 259.247418][ T3576] CR2: 00007fff386e7408 CR3: 000000000d3a8000 CR4: 00000000003526f0 [ 259.247435][ T3576] Call Trace: [ 259.247447][ T3576] [ 259.247463][ T3576] ? __pfx_cfg80211_scan_done+0x10/0x10 [ 259.247501][ T3576] __ieee80211_scan_completed+0x550/0xb20 [ 259.247532][ T3576] cfg80211_wiphy_work+0x2ab/0x450 [ 259.247555][ T3576] ? process_scheduled_works+0x9ef/0x1770 [ 259.247579][ T3576] process_scheduled_works+0xad1/0x1770 [ 259.247635][ T3576] ? __pfx_process_scheduled_works+0x10/0x10 [ 259.247654][ T3576] ? do_raw_spin_lock+0x121/0x290 [ 259.247691][ T3576] worker_thread+0x8a0/0xda0 [ 259.247725][ T3576] ? __kthread_parkme+0x7b/0x200 [ 259.247757][ T3576] kthread+0x711/0x8a0 [ 259.247785][ T3576] ? __pfx_worker_thread+0x10/0x10 [ 259.247805][ T3576] ? __pfx_kthread+0x10/0x10 [ 259.247826][ T3576] ? rt_spin_unlock+0x150/0x200 [ 259.247855][ T3576] ? rt_spin_unlock+0x161/0x200 [ 259.247875][ T3576] ? __pfx_kthread+0x10/0x10 [ 259.247900][ T3576] ret_from_fork+0x510/0xa50 [ 259.247923][ T3576] ? __pfx_ret_from_fork+0x10/0x10 [ 259.247942][ T3576] ? __switch_to+0xc9e/0x1480 [ 259.247972][ T3576] ? __pfx_kthread+0x10/0x10 [ 259.247998][ T3576] ret_from_fork_asm+0x1a/0x30 [ 259.248062][ T3576] [ 259.248077][ T3576] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 259.248090][ T3576] CPU: 0 UID: 0 PID: 3576 Comm: kworker/u8:15 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 259.248111][ T3576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 259.248123][ T3576] Workqueue: events_unbound cfg80211_wiphy_work [ 259.248145][ T3576] Call Trace: [ 259.248152][ T3576] [ 259.248160][ T3576] vpanic+0x1e0/0x670 [ 259.248188][ T3576] panic+0xb9/0xc0 [ 259.248211][ T3576] ? __pfx_panic+0x10/0x10 [ 259.248244][ T3576] ? ret_from_fork_asm+0x1a/0x30 [ 259.248274][ T3576] __warn+0x317/0x4b0 [ 259.248297][ T3576] ? cfg80211_scan_done+0x2d5/0x460 [ 259.248326][ T3576] ? cfg80211_scan_done+0x2d5/0x460 [ 259.248352][ T3576] __report_bug+0x288/0x500 [ 259.248379][ T3576] ? cfg80211_scan_done+0x2d5/0x460 [ 259.248411][ T3576] ? __pfx___report_bug+0x10/0x10 [ 259.248441][ T3576] ? __lock_acquire+0x6b6/0x2cf0 [ 259.248476][ T3576] ? cfg80211_scan_done+0x2d5/0x460 [ 259.248500][ T3576] report_bug+0x16a/0x220 [ 259.248524][ T3576] ? cfg80211_scan_done+0x2d5/0x460 [ 259.248546][ T3576] ? cfg80211_scan_done+0x2d7/0x460 [ 259.248568][ T3576] handle_bug+0x98/0x200 [ 259.248588][ T3576] exc_invalid_op+0x1a/0x50 [ 259.248606][ T3576] asm_exc_invalid_op+0x1a/0x20 [ 259.248631][ T3576] RIP: 0010:cfg80211_scan_done+0x2d5/0x460 [ 259.248656][ T3576] Code: 75 7b 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 7a 8a 9c f7 90 0f 0b 90 e9 25 fe ff ff e8 6c 8a 9c f7 90 <0f> 0b 90 e9 db fe ff ff e8 5e 8a 9c f7 48 8d 3d f7 43 c7 04 67 48 [ 259.248670][ T3576] RSP: 0018:ffffc9000d2e78e0 EFLAGS: 00010293 [ 259.248685][ T3576] RAX: ffffffff8a2321c4 RBX: ffff88802e603618 RCX: ffff88803083dac0 [ 259.248699][ T3576] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 259.248711][ T3576] RBP: ffffc9000d2e79a8 R08: 0000000000000000 R09: 0000000000000000 [ 259.248722][ T3576] R10: dffffc0000000000 R11: fffffbfff1db66ef R12: ffff88802e603600 [ 259.248736][ T3576] R13: ffff88802e603678 R14: dffffc0000000000 R15: ffff888031c10860 [ 259.248757][ T3576] ? cfg80211_scan_done+0x2d4/0x460 [ 259.248796][ T3576] ? __pfx_cfg80211_scan_done+0x10/0x10 [ 259.248831][ T3576] __ieee80211_scan_completed+0x550/0xb20 [ 259.248861][ T3576] cfg80211_wiphy_work+0x2ab/0x450 [ 259.248883][ T3576] ? process_scheduled_works+0x9ef/0x1770 [ 259.248900][ T3576] process_scheduled_works+0xad1/0x1770 [ 259.248926][ T3576] ? __pfx_process_scheduled_works+0x10/0x10 [ 259.248936][ T3576] ? do_raw_spin_lock+0x121/0x290 [ 259.248955][ T3576] worker_thread+0x8a0/0xda0 [ 259.248973][ T3576] ? __kthread_parkme+0x7b/0x200 [ 259.248990][ T3576] kthread+0x711/0x8a0 [ 259.249005][ T3576] ? __pfx_worker_thread+0x10/0x10 [ 259.249017][ T3576] ? __pfx_kthread+0x10/0x10 [ 259.249029][ T3576] ? rt_spin_unlock+0x150/0x200 [ 259.249044][ T3576] ? rt_spin_unlock+0x161/0x200 [ 259.249056][ T3576] ? __pfx_kthread+0x10/0x10 [ 259.249070][ T3576] ret_from_fork+0x510/0xa50 [ 259.249083][ T3576] ? __pfx_ret_from_fork+0x10/0x10 [ 259.249092][ T3576] ? __switch_to+0xc9e/0x1480 [ 259.249110][ T3576] ? __pfx_kthread+0x10/0x10 [ 259.249124][ T3576] ret_from_fork_asm+0x1a/0x30 [ 259.249147][ T3576] [ 259.249508][ T3576] Kernel Offset: disabled