Warning: Permanently added '10.128.0.93' (ED25519) to the list of known hosts. 2026/05/25 11:40:15 parsed 1 programs [ 71.061502][ T4200] cgroup: Unknown subsys name 'net' [ 71.200560][ T4200] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.415089][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.421711][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.781416][ T4200] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 74.289412][ T4214] chnl_net:caif_netlink_parms(): no params data found [ 74.349138][ T4214] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.356757][ T4214] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.365353][ T4214] device bridge_slave_0 entered promiscuous mode [ 74.375613][ T4214] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.383449][ T4214] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.391585][ T4214] device bridge_slave_1 entered promiscuous mode [ 74.414409][ T4214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.426666][ T4214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.461804][ T4214] team0: Port device team_slave_0 added [ 74.470362][ T4214] team0: Port device team_slave_1 added [ 74.488694][ T4214] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.495908][ T4214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.522054][ T4214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.536375][ T4214] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.543676][ T4214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.570375][ T4214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.604452][ T4214] device hsr_slave_0 entered promiscuous mode [ 74.611560][ T4214] device hsr_slave_1 entered promiscuous mode [ 74.717361][ T4214] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.729158][ T4214] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.738902][ T4214] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.748759][ T4214] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.774637][ T4214] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.781843][ T4214] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.790547][ T4214] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.797804][ T4214] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.848239][ T4214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.864133][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.875911][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.885612][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.895552][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 74.910437][ T4214] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.924440][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.934533][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.942662][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.957956][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.968499][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.976520][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.998343][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.007408][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.021140][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.038860][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.047799][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.060541][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.163677][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.172649][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.187788][ T4214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.207690][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.229375][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.238912][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.247430][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.259345][ T4214] device veth0_vlan entered promiscuous mode [ 75.272309][ T4214] device veth1_vlan entered promiscuous mode [ 75.296855][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.305764][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.316729][ T4214] device veth0_macvtap entered promiscuous mode [ 75.327557][ T4214] device veth1_macvtap entered promiscuous mode [ 75.344942][ T4214] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.358161][ T4214] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.366476][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.376722][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.385736][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.394920][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.404368][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.413425][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.425911][ T4214] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.435500][ T4214] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.445677][ T4214] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.456389][ T4214] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.612682][ T4214] syz-executor (4214) used greatest stack depth: 20912 bytes left [ 75.629466][ T154] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.005470][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.020081][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.030365][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.053229][ T4265] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.061381][ T4265] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.070718][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.689646][ T154] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.037889][ T154] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.101380][ T154] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.946593][ T154] device hsr_slave_0 left promiscuous mode [ 81.962937][ T154] device hsr_slave_1 left promiscuous mode [ 81.983873][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.991559][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.004255][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.013575][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.032942][ T154] device bridge_slave_1 left promiscuous mode [ 82.040448][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.088940][ T154] device bridge_slave_0 left promiscuous mode [ 82.112562][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.160918][ T154] device veth1_macvtap left promiscuous mode [ 82.183119][ T154] device veth0_macvtap left promiscuous mode [ 82.189481][ T154] device veth1_vlan left promiscuous mode [ 82.213716][ T154] device veth0_vlan left promiscuous mode [ 82.560948][ T154] team0 (unregistering): Port device team_slave_1 removed [ 82.575375][ T154] team0 (unregistering): Port device team_slave_0 removed [ 82.589710][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 82.605843][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 82.667472][ T154] bond0 (unregistering): Released all slaves 2026/05/25 11:40:30 executed programs: 0 [ 83.934823][ T4341] chnl_net:caif_netlink_parms(): no params data found [ 84.031460][ T4341] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.040594][ T4341] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.051412][ T4341] device bridge_slave_0 entered promiscuous mode [ 84.060874][ T4341] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.070314][ T4341] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.078884][ T4341] device bridge_slave_1 entered promiscuous mode [ 84.111095][ T4341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.126085][ T4341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.156399][ T4341] team0: Port device team_slave_0 added [ 84.165915][ T4341] team0: Port device team_slave_1 added [ 84.200672][ T4341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.222202][ T4341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.262794][ T4341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.276170][ T4341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.284277][ T4341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.313995][ T4341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.358444][ T4341] device hsr_slave_0 entered promiscuous mode [ 84.374848][ T4341] device hsr_slave_1 entered promiscuous mode [ 85.067836][ T4341] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.096211][ T4341] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.121997][ T4341] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.132002][ T4341] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.211680][ T4341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.238087][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 85.249346][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 85.282925][ T4341] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.310286][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 85.330884][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 85.345351][ T4265] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.356171][ T4265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.369333][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.395213][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 85.405576][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 85.414775][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.421906][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.435811][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 85.455827][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 85.476010][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 85.487796][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 85.500621][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 85.513564][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 85.542936][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 85.551654][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 85.561201][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.571557][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.583264][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.597782][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.760216][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.769444][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.793448][ T4341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.821594][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.833887][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.858266][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.867323][ T4274] Bluetooth: hci0: command 0x0409 tx timeout [ 85.869736][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.903802][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.919811][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.942856][ T4341] device veth0_vlan entered promiscuous mode [ 85.957456][ T4341] device veth1_vlan entered promiscuous mode [ 85.996599][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 86.013312][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 86.028133][ T4341] device veth0_macvtap entered promiscuous mode [ 86.037026][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.048385][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.060145][ T4341] device veth1_macvtap entered promiscuous mode [ 86.088978][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 86.105783][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 86.120252][ T4341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.129103][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.140843][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.159407][ T4341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.168986][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.180481][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.193301][ T4341] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.204388][ T4341] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.214259][ T4341] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.226657][ T4341] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.313054][ T4265] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.321296][ T4265] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.336246][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.364221][ T4265] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.373163][ T4265] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.382687][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.493747][ T4441] netlink: 'syz.0.17': attribute type 27 has an invalid length. [ 86.774893][ T1325] cfg80211: failed to load regulatory.db [ 86.847820][ T4441] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.856987][ T4441] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.285006][ T4441] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.333997][ T4441] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.760720][ T4441] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.770267][ T4441] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.779723][ T4441] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.789604][ T4441] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.904981][ T23] Bluetooth: hci0: command 0x041b tx timeout [ 88.031379][ T4449] ------------[ cut here ]------------ [ 88.038785][ T4449] wlan1: Failed check-sdata-in-driver check, flags: 0x4 [ 88.047560][ T4449] WARNING: CPU: 1 PID: 4449 at net/mac80211/driver-ops.h:172 ieee80211_bss_info_change_notify+0x37b/0x550 [ 88.059871][ T4449] Modules linked in: [ 88.070519][ T4449] CPU: 1 PID: 4449 Comm: syz.0.18 Not tainted syzkaller #0 [ 88.098889][ T4449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 88.123310][ T4449] RIP: 0010:ieee80211_bss_info_change_notify+0x37b/0x550 [ 88.130426][ T4449] Code: 0d 7e f8 49 8b 84 24 00 06 00 00 49 81 c4 20 06 00 00 48 85 c0 4c 0f 45 e0 48 c7 c7 c0 39 39 8b 4c 89 e6 89 ea e8 25 a2 71 00 <0f> 0b e9 07 fd ff ff e8 c9 ee 38 f8 0f 0b e9 b1 fe ff ff e8 bd ee [ 88.212168][ T4449] RSP: 0018:ffffc9000321f4c8 EFLAGS: 00010246 [ 88.218951][ T4449] RAX: 6039b409acbd2d00 RBX: 0000000000400000 RCX: ffff888073c09dc0 [ 88.241554][ T4449] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 88.250743][ T4449] RBP: 0000000000000004 R08: ffff8880b9133d7f R09: 1ffff110172267af [ 88.260131][ T4449] R10: dffffc0000000000 R11: ffffed10172267b0 R12: ffff888072694000 [ 88.269894][ T4449] R13: ffff888072695290 R14: ffff88805d908e00 R15: ffff888072696268 [ 88.279115][ T4449] FS: 0000555573d8e500(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 88.301701][ T4449] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 88.308745][ T4449] CR2: 00005619d2f67950 CR3: 00000000704f9000 CR4: 00000000003506f0 [ 88.317169][ T4449] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 88.342250][ T4449] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 88.350399][ T4449] Call Trace: [ 88.362357][ T4449] [ 88.365725][ T4449] ? netif_carrier_on+0xe1/0x120 [ 88.371034][ T4449] ieee80211_ocb_leave+0x26f/0x320 [ 88.387661][ T4449] __cfg80211_leave_ocb+0x219/0x3f0 [ 88.395586][ T4449] cfg80211_leave_ocb+0x53/0x70 [ 88.400503][ T4449] cfg80211_change_iface+0x4f1/0xeb0 [ 88.415520][ T4449] nl80211_set_interface+0x5a7/0x7e0 [ 88.420993][ T4449] ? nl80211_dump_interface+0x5c0/0x5c0 [ 88.427425][ T4449] ? mutex_lock_nested+0x17/0x20 [ 88.437336][ T4449] genl_rcv_msg+0xcea/0xf90 [ 88.441942][ T4449] ? genl_bind+0x380/0x380 [ 88.448444][ T4449] ? verify_lock_unused+0x140/0x140 [ 88.454259][ T4449] ? verify_lock_unused+0x140/0x140 [ 88.459932][ T4449] ? nl80211_dump_interface+0x5c0/0x5c0 [ 88.466418][ T4449] netlink_rcv_skb+0x1f5/0x440 [ 88.471245][ T4449] ? genl_bind+0x380/0x380 [ 88.476175][ T4449] ? netlink_ack+0xb50/0xb50 [ 88.480835][ T4449] ? __lock_acquire+0x7d10/0x7d10 [ 88.486575][ T4449] ? down_read+0x1aa/0x2e0 [ 88.491059][ T4449] genl_rcv+0x24/0x40 [ 88.495587][ T4449] netlink_unicast+0x774/0x920 [ 88.500427][ T4449] netlink_sendmsg+0x8ba/0xbe0 [ 88.505777][ T4449] ? netlink_getsockopt+0x570/0x570 [ 88.511034][ T4449] ? aa_sock_msg_perm+0x94/0x150 [ 88.516657][ T4449] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 88.521997][ T4449] ? security_socket_sendmsg+0x7c/0xa0 [ 88.528013][ T4449] __sys_sendto+0x46d/0x620 [ 88.533102][ T4449] ? __ia32_sys_getpeername+0x80/0x80 [ 88.538551][ T4449] ? __lock_acquire+0x7d10/0x7d10 [ 88.544160][ T4449] ? lock_chain_count+0x20/0x20 [ 88.549122][ T4449] ? vtime_user_exit+0x2c8/0x3e0 [ 88.554857][ T4449] __x64_sys_sendto+0xda/0xf0 [ 88.559738][ T4449] do_syscall_64+0x4c/0xa0 [ 88.564843][ T4449] ? clear_bhb_loop+0x30/0x80 [ 88.569576][ T4449] ? clear_bhb_loop+0x30/0x80 [ 88.574786][ T4449] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 88.580868][ T4449] RIP: 0033:0x7f6ab843d68e [ 88.585812][ T4449] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 88.605834][ T4449] RSP: 002b:00007ffc86d7ff28 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 88.614834][ T4449] RAX: ffffffffffffffda RBX: 0000555573d8e500 RCX: 00007f6ab843d68e [ 88.623184][ T4449] RDX: 0000000000000024 RSI: 00007ffc86d80120 RDI: 0000000000000004 [ 88.631285][ T4449] RBP: 0000000000000000 R08: 00007ffc86d7ffa4 R09: 000000000000000c [ 88.639931][ T4449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 88.648412][ T4449] R13: 0000000000000000 R14: 00007ffc86d80120 R15: 0000000000000000 [ 88.656937][ T4449] [ 88.660017][ T4449] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 88.667336][ T4449] CPU: 0 PID: 4449 Comm: syz.0.18 Not tainted syzkaller #0 [ 88.674575][ T4449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 88.684894][ T4449] Call Trace: [ 88.688317][ T4449] [ 88.691282][ T4449] dump_stack_lvl+0x188/0x250 [ 88.696005][ T4449] ? show_regs_print_info+0x20/0x20 [ 88.701481][ T4449] ? load_image+0x400/0x400 [ 88.706604][ T4449] panic+0x2e5/0x810 [ 88.710658][ T4449] ? bpf_jit_dump+0xd0/0xd0 [ 88.715231][ T4449] ? ieee80211_bss_info_change_notify+0x37b/0x550 [ 88.721701][ T4449] __warn+0x248/0x2b0 [ 88.725755][ T4449] ? ieee80211_bss_info_change_notify+0x37b/0x550 [ 88.732350][ T4449] report_bug+0x1b7/0x2e0 [ 88.737448][ T4449] handle_bug+0x3a/0x70 [ 88.741817][ T4449] exc_invalid_op+0x16/0x40 [ 88.746389][ T4449] asm_exc_invalid_op+0x16/0x20 [ 88.751533][ T4449] RIP: 0010:ieee80211_bss_info_change_notify+0x37b/0x550 [ 88.758608][ T4449] Code: 0d 7e f8 49 8b 84 24 00 06 00 00 49 81 c4 20 06 00 00 48 85 c0 4c 0f 45 e0 48 c7 c7 c0 39 39 8b 4c 89 e6 89 ea e8 25 a2 71 00 <0f> 0b e9 07 fd ff ff e8 c9 ee 38 f8 0f 0b e9 b1 fe ff ff e8 bd ee [ 88.778784][ T4449] RSP: 0018:ffffc9000321f4c8 EFLAGS: 00010246 [ 88.784886][ T4449] RAX: 6039b409acbd2d00 RBX: 0000000000400000 RCX: ffff888073c09dc0 [ 88.792988][ T4449] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 88.801413][ T4449] RBP: 0000000000000004 R08: ffff8880b9133d7f R09: 1ffff110172267af [ 88.809904][ T4449] R10: dffffc0000000000 R11: ffffed10172267b0 R12: ffff888072694000 [ 88.817894][ T4449] R13: ffff888072695290 R14: ffff88805d908e00 R15: ffff888072696268 [ 88.826361][ T4449] ? ieee80211_bss_info_change_notify+0x37b/0x550 [ 88.832884][ T4449] ? netif_carrier_on+0xe1/0x120 [ 88.837925][ T4449] ieee80211_ocb_leave+0x26f/0x320 [ 88.843208][ T4449] __cfg80211_leave_ocb+0x219/0x3f0 [ 88.848557][ T4449] cfg80211_leave_ocb+0x53/0x70 [ 88.853428][ T4449] cfg80211_change_iface+0x4f1/0xeb0 [ 88.858735][ T4449] nl80211_set_interface+0x5a7/0x7e0 [ 88.864054][ T4449] ? nl80211_dump_interface+0x5c0/0x5c0 [ 88.869750][ T4449] ? mutex_lock_nested+0x17/0x20 [ 88.874720][ T4449] genl_rcv_msg+0xcea/0xf90 [ 88.879295][ T4449] ? genl_bind+0x380/0x380 [ 88.883929][ T4449] ? verify_lock_unused+0x140/0x140 [ 88.889185][ T4449] ? verify_lock_unused+0x140/0x140 [ 88.894419][ T4449] ? nl80211_dump_interface+0x5c0/0x5c0 [ 88.899997][ T4449] netlink_rcv_skb+0x1f5/0x440 [ 88.904792][ T4449] ? genl_bind+0x380/0x380 [ 88.909256][ T4449] ? netlink_ack+0xb50/0xb50 [ 88.913863][ T4449] ? __lock_acquire+0x7d10/0x7d10 [ 88.919000][ T4449] ? down_read+0x1aa/0x2e0 [ 88.923446][ T4449] genl_rcv+0x24/0x40 [ 88.927567][ T4449] netlink_unicast+0x774/0x920 [ 88.932361][ T4449] netlink_sendmsg+0x8ba/0xbe0 [ 88.937147][ T4449] ? netlink_getsockopt+0x570/0x570 [ 88.942451][ T4449] ? aa_sock_msg_perm+0x94/0x150 [ 88.947534][ T4449] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 88.952833][ T4449] ? security_socket_sendmsg+0x7c/0xa0 [ 88.958682][ T4449] __sys_sendto+0x46d/0x620 [ 88.963471][ T4449] ? __ia32_sys_getpeername+0x80/0x80 [ 88.968910][ T4449] ? __lock_acquire+0x7d10/0x7d10 [ 88.974321][ T4449] ? lock_chain_count+0x20/0x20 [ 88.979586][ T4449] ? vtime_user_exit+0x2c8/0x3e0 [ 88.984988][ T4449] __x64_sys_sendto+0xda/0xf0 [ 88.989733][ T4449] do_syscall_64+0x4c/0xa0 [ 88.994288][ T4449] ? clear_bhb_loop+0x30/0x80 [ 88.999035][ T4449] ? clear_bhb_loop+0x30/0x80 [ 89.004070][ T4449] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 89.010025][ T4449] RIP: 0033:0x7f6ab843d68e [ 89.014516][ T4449] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 89.035465][ T4449] RSP: 002b:00007ffc86d7ff28 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 89.044308][ T4449] RAX: ffffffffffffffda RBX: 0000555573d8e500 RCX: 00007f6ab843d68e [ 89.052588][ T4449] RDX: 0000000000000024 RSI: 00007ffc86d80120 RDI: 0000000000000004 [ 89.060787][ T4449] RBP: 0000000000000000 R08: 00007ffc86d7ffa4 R09: 000000000000000c [ 89.069514][ T4449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 89.078291][ T4449] R13: 0000000000000000 R14: 00007ffc86d80120 R15: 0000000000000000 [ 89.086556][ T4449] [ 89.090024][ T4449] Kernel Offset: disabled [ 89.094716][ T4449] Rebooting in 86400 seconds..