Warning: Permanently added '[localhost]:19131' (ED25519) to the list of known hosts.
syzkaller login: [ 97.016139][ T9] cfg80211: failed to load regulatory.db
2026/06/05 21:24:47 parsed 1 programs
qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x400000)
[ 100.226252][ T1029] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1
[ 100.236343][ T1029] ata1: failed to read log page 10h (errno=-5)
[ 100.247282][ T1029] ata1.00: exception Emask 0x1 SAct 0x70 SErr 0x0 action 0x0
[ 100.263331][ T1029] ata1.00: irq_stat 0x41000000
[ 100.265397][ T1029] ata1.00: failed command: WRITE FPDMA QUEUED
[ 100.268129][ T1029] ata1.00: cmd 61/48:20:8e:c9:05/0b:00:00:00:00/40 tag 4 ncq dma 1478656 ou
[ 100.268129][ T1029] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error)
[ 100.283449][ T1029] ata1.00: status: { DRDY }
[ 100.285686][ T1029] ata1.00: failed command: WRITE FPDMA QUEUED
[ 100.289204][ T1029] ata1.00: cmd 61/00:28:b6:78:05/20:00:00:00:00/40 tag 5 ncq dma 4194304 ou
[ 100.289204][ T1029] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error)
[ 100.312604][ T1029] ata1.00: status: { DRDY }
[ 100.315169][ T1029] ata1.00: failed command: WRITE FPDMA QUEUED
[ 100.319992][ T1029] ata1.00: cmd 61/b8:30:b6:98:05/16:00:00:00:00/40 tag 6 ncq dma 2977792 ou
[ 100.319992][ T1029] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error)
[ 100.343109][ T1029] ata1.00: status: { DRDY }
[ 100.347538][ T1029] ata1.00: configured for UDMA/100
[ 100.350396][ T1029] ata1: EH complete
[ 100.715937][ T5298] cgroup: Unknown subsys name 'net'
[ 100.789362][ T5298] cgroup: Unknown subsys name 'cpuset'
[ 100.797086][ T5298] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 102.719800][ T5298] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 110.242149][ T5318] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 110.857832][ T5325] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 110.862900][ T5325] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 110.867277][ T5325] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 110.872663][ T5325] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 110.877176][ T5325] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 115.366556][ T30] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 115.370372][ T30] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 115.455857][ T30] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 115.473951][ T30] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 116.728854][ T5369] bridge0: port 1(bridge_slave_0) entered blocking state
[ 116.733369][ T5369] bridge0: port 1(bridge_slave_0) entered disabled state
[ 116.736521][ T5369] bridge_slave_0: entered allmulticast mode
[ 116.741209][ T5369] bridge_slave_0: entered promiscuous mode
[ 116.750620][ T5369] bridge0: port 2(bridge_slave_1) entered blocking state
[ 116.754660][ T5369] bridge0: port 2(bridge_slave_1) entered disabled state
[ 116.757739][ T5369] bridge_slave_1: entered allmulticast mode
[ 116.764639][ T5369] bridge_slave_1: entered promiscuous mode
[ 116.802295][ T5369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 116.809316][ T5369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 116.840413][ T5369] team0: Port device team_slave_0 added
[ 116.846844][ T5369] team0: Port device team_slave_1 added
[ 116.874469][ T5369] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 116.877755][ T5369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 116.889604][ T5369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 116.897145][ T5369] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 116.900475][ T5369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 116.912221][ T5369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 116.959088][ T5369] hsr_slave_0: entered promiscuous mode
[ 116.964618][ T5369] hsr_slave_1: entered promiscuous mode
[ 117.160122][ T5369] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 117.174092][ T5369] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 117.178765][ T5369] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 117.187551][ T5369] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 117.194876][ T5369] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 117.209498][ T5369] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 117.217544][ T5369] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 117.231072][ T5369] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 117.274924][ T5369] bridge0: port 2(bridge_slave_1) entered blocking state
[ 117.277903][ T5369] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 117.282137][ T5369] bridge0: port 1(bridge_slave_0) entered blocking state
[ 117.285204][ T5369] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 117.360867][ T5369] 8021q: adding VLAN 0 to HW filter on device bond0
[ 117.383171][ T136] bridge0: port 1(bridge_slave_0) entered disabled state
[ 117.389077][ T136] bridge0: port 2(bridge_slave_1) entered disabled state
[ 117.401549][ T5369] 8021q: adding VLAN 0 to HW filter on device team0
[ 117.413228][ T77] bridge0: port 1(bridge_slave_0) entered blocking state
[ 117.416266][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 117.434877][ T77] bridge0: port 2(bridge_slave_1) entered blocking state
[ 117.437949][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 117.860534][ T5369] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 117.922640][ T5369] veth0_vlan: entered promiscuous mode
[ 117.938213][ T5369] veth1_vlan: entered promiscuous mode
[ 117.985446][ T5369] veth0_macvtap: entered promiscuous mode
[ 117.995426][ T5369] veth1_macvtap: entered promiscuous mode
[ 118.021064][ T5369] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 118.035944][ T5369] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 118.050818][ T77] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 118.067982][ T77] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 118.089278][ T77] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 118.099409][ T77] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 118.417080][ T77] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 118.620079][ T77] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 119.481289][ T77] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x82000)
[ 120.174255][ T1029] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1
[ 120.177071][ T1029] ata1: failed to read log page 10h (errno=-5)
[ 120.179871][ T1029] ata1.00: NCQ disabled due to excessive errors
[ 120.182695][ T1029] ata1.00: exception Emask 0x1 SAct 0x4000 SErr 0x0 action 0x0
[ 120.217106][ T1029] ata1.00: irq_stat 0x41000008
[ 120.224793][ T1029] ata1.00: failed command: READ FPDMA QUEUED
[ 120.235102][ T1029] ata1.00: cmd 60/10:70:f6:3d:04/04:00:00:00:00/40 tag 14 ncq dma 532480 in
[ 120.235102][ T1029] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error)
[ 120.267135][ T1029] ata1.00: status: { DRDY }
[ 120.278561][ T1029] ata1.00: error: { ABRT }
[ 120.292649][ T1029] ata1.00: configured for UDMA/100
[ 120.305549][ T1029] sd 0:0:0:0: [sda] tag#14 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[ 120.327369][ T1029] sd 0:0:0:0: [sda] tag#14 Sense Key : Aborted Command [current]
[ 120.337619][ T1029] sd 0:0:0:0: [sda] tag#14 Add. Sense: No additional sense information
[ 120.357048][ T1029] sd 0:0:0:0: [sda] tag#14 CDB: Read(10) 28 00 00 04 3d f6 00 04 10 00
[ 120.376804][ T1029] I/O error, dev sda, sector 278006 op 0x0:(READ) flags 0x80700 phys_seg 66 prio class 2
[ 120.385940][ T77] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 120.396534][ T1029] ata1: EH complete
[ 121.299945][ T77] bridge_slave_1: left allmulticast mode
[ 121.313832][ T77] bridge_slave_1: left promiscuous mode
[ 121.318416][ T77] bridge0: port 2(bridge_slave_1) entered disabled state
[ 121.339116][ T77] bridge_slave_0: left allmulticast mode
[ 121.341612][ T77] bridge_slave_0: left promiscuous mode
[ 121.353679][ T77] bridge0: port 1(bridge_slave_0) entered disabled state
[ 121.747067][ T77] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 121.764813][ T77] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 121.774467][ T77] bond0 (unregistering): Released all slaves
[ 121.882205][ T77] hsr_slave_0: left promiscuous mode
[ 121.885827][ T77] hsr_slave_1: left promiscuous mode
[ 121.900141][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 121.911787][ T77] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 121.924341][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 121.933331][ T77] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 121.971124][ T77] veth1_macvtap: left promiscuous mode
[ 121.976292][ T77] veth0_macvtap: left promiscuous mode
[ 121.978899][ T77] veth1_vlan: left promiscuous mode
[ 121.988228][ T77] veth0_vlan: left promiscuous mode
2026/06/05 21:25:11 executed programs: 0
[ 122.090792][ T4656] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 122.102206][ T4656] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 122.108339][ T4656] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 122.113442][ T4656] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 122.118410][ T4656] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 122.430958][ T77] team0 (unregistering): Port device team_slave_1 removed
[ 122.455490][ T77] team0 (unregistering): Port device team_slave_0 removed
[ 123.376660][ T5002] 8021q: adding VLAN 0 to HW filter on device eth2
[ 124.083633][ T5002] 8021q: adding VLAN 0 to HW filter on device eth3
[ 124.135846][ T5430] bridge0: port 1(bridge_slave_0) entered blocking state
[ 124.142366][ T5430] bridge0: port 1(bridge_slave_0) entered disabled state
[ 124.146648][ T5430] bridge_slave_0: entered allmulticast mode
[ 124.150743][ T5430] bridge_slave_0: entered promiscuous mode
[ 124.161624][ T5430] bridge0: port 2(bridge_slave_1) entered blocking state
[ 124.168339][ T5430] bridge0: port 2(bridge_slave_1) entered disabled state
[ 124.183447][ T5430] bridge_slave_1: entered allmulticast mode
[ 124.187308][ T5430] bridge_slave_1: entered promiscuous mode
[ 124.215304][ T4656] Bluetooth: hci0: command tx timeout
[ 124.258024][ T5430] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 124.275872][ T5430] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 124.345285][ T5430] team0: Port device team_slave_0 added
[ 124.350210][ T5430] team0: Port device team_slave_1 added
[ 124.409311][ T5430] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 124.412242][ T5430] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 124.445873][ T5430] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 124.457356][ T5430] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 124.464048][ T5430] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 124.493538][ T5430] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 124.556276][ T5002] 8021q: adding VLAN 0 to HW filter on device eth4
[ 124.582503][ T5430] hsr_slave_0: entered promiscuous mode
[ 124.587097][ T5430] hsr_slave_1: entered promiscuous mode
[ 125.407017][ T5430] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 125.444833][ T5430] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 125.449273][ T5430] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 125.466433][ T5430] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 125.474556][ T5430] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 125.487402][ T5430] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 125.497168][ T5430] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 125.510540][ T5430] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 125.707582][ T5430] 8021q: adding VLAN 0 to HW filter on device bond0
[ 125.747910][ T5430] 8021q: adding VLAN 0 to HW filter on device team0
[ 125.772587][ T69] bridge0: port 1(bridge_slave_0) entered blocking state
[ 125.775943][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 125.808046][ T69] bridge0: port 2(bridge_slave_1) entered blocking state
[ 125.811357][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 126.295105][ T4656] Bluetooth: hci0: command tx timeout
[ 126.609342][ T5430] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 126.716588][ T5430] veth0_vlan: entered promiscuous mode
[ 126.741884][ T5430] veth1_vlan: entered promiscuous mode
[ 126.799612][ T5430] veth0_macvtap: entered promiscuous mode
[ 126.811582][ T5430] veth1_macvtap: entered promiscuous mode
[ 126.870511][ T5430] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 126.907355][ T5430] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 126.935678][ T77] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 126.960084][ T77] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 126.973625][ T77] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 126.991196][ T77] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 127.208307][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 127.211980][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 127.252162][ T30] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 127.262080][ T30] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2026/06/05 21:25:16 executed programs: 2
[ 127.380178][ T5517] syz.0.17 (5517) used greatest stack depth: 15888 bytes left
[ 128.373876][ T4656] Bluetooth: hci0: command tx timeout
[ 130.454583][ T4656] Bluetooth: hci0: command tx timeout
2026/06/05 21:25:21 executed programs: 104
[ 134.730962][ T1139] ------------[ cut here ]------------
[ 134.735309][ T1139] wlan1: Dropped data frame as no usable bitrate found while scanning and associated. Target station: 08:02:11:00:00:00 on 5 GHz band
[ 134.741312][ T1139] WARNING: net/mac80211/tx.c:757 at ieee80211_tx_h_rate_ctrl+0xd82/0x1760, CPU#0: kworker/u4:9/1139
[ 134.746210][ T1139] Modules linked in:
[ 134.749777][ T1139] CPU: 0 UID: 0 PID: 1139 Comm: kworker/u4:9 Not tainted syzkaller #0 PREEMPT(full)
[ 134.754845][ T1139] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 134.759089][ T1139] Workqueue: events_unbound cfg80211_wiphy_work
[ 134.761899][ T1139] RIP: 0010:ieee80211_tx_h_rate_ctrl+0xded/0x1760
[ 134.764791][ T1139] Code: 1c 08 00 00 48 8b 44 24 38 8b 30 45 31 ed 83 e6 07 41 0f 95 c5 31 ff e8 41 1b a1 f6 43 8d 4c 6d 02 48 89 df 4c 89 f6 4c 89 fa <67> 48 0f b9 3a 41 bd 01 00 00 00 e9 73 01 00 00 e8 de 16 a1 f6 e9
[ 134.774388][ T1139] RSP: 0018:ffffc90001807420 EFLAGS: 00010293
[ 134.777020][ T1139] RAX: ffffffff8b24af1f RBX: ffffffff9041ed50 RCX: 0000000000000005
[ 134.780355][ T1139] RDX: ffff8880124d3784 RSI: ffff8880573e1888 RDI: ffffffff9041ed50
[ 134.783811][ T1139] RBP: ffffc90001807588 R08: ffff888057b02a8f R09: 1ffff1100af60551
[ 134.787761][ T1139] R10: dffffc0000000000 R11: ffffed100af60552 R12: dffffc0000000000
[ 134.791534][ T1139] R13: 0000000000000001 R14: ffff8880573e1888 R15: ffff8880124d3784
[ 134.794922][ T1139] FS: 0000000000000000(0000) GS:ffff88808c895000(0000) knlGS:0000000000000000
[ 134.798634][ T1139] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 134.801640][ T1139] CR2: 000017ca5b4ec000 CR3: 0000000012b7a000 CR4: 0000000000352ef0
[ 134.805838][ T1139] Call Trace:
[ 134.807614][ T1139]
[ 134.808871][ T1139] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10
[ 134.811225][ T1139] ? ieee80211_is_bufferable_mmpdu+0x103/0x200
[ 134.813809][ T1139] invoke_tx_handlers_late+0xba/0x18a0
[ 134.816176][ T1139] ? invoke_tx_handlers_early+0xa0c/0x1d50
[ 134.818917][ T1139] ieee80211_tx+0x2d7/0x4b0
[ 134.821266][ T1139] ? __pfx_ieee80211_tx+0x10/0x10
[ 134.823998][ T1139] ? __ieee80211_tx_skb_tid_band+0x4cb/0x680
[ 134.826974][ T1139] __ieee80211_tx_skb_tid_band+0x50f/0x680
[ 134.829835][ T1139] ? ieee80211_scan_state_send_probe+0x4e8/0xa00
[ 134.832855][ T1139] ieee80211_scan_state_send_probe+0x594/0xa00
[ 134.835541][ T1139] ieee80211_scan_work+0x64d/0x1c60
[ 134.837837][ T1139] cfg80211_wiphy_work+0x2cf/0x460
[ 134.840171][ T1139] ? process_scheduled_works+0xa70/0x1860
[ 134.843084][ T1139] process_scheduled_works+0xb5d/0x1860
[ 134.845909][ T1139] ? __pfx_process_scheduled_works+0x10/0x10
[ 134.848506][ T1139] ? assign_work+0x3d5/0x5e0
[ 134.850225][ T1139] worker_thread+0xa53/0xfc0
[ 134.852147][ T1139] kthread+0x389/0x470
[ 134.854373][ T1139] ? __pfx_worker_thread+0x10/0x10
[ 134.857003][ T1139] ? __pfx_kthread+0x10/0x10
[ 134.859566][ T1139] ret_from_fork+0x514/0xb70
[ 134.861727][ T1139] ? __pfx_ret_from_fork+0x10/0x10
[ 134.863873][ T1139] ? __switch_to+0xc79/0x1410
[ 134.865973][ T1139] ? __pfx_kthread+0x10/0x10
[ 134.868478][ T1139] ret_from_fork_asm+0x1a/0x30
[ 134.871201][ T1139]
[ 134.872826][ T1139] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 134.876073][ T1139] CPU: 0 UID: 0 PID: 1139 Comm: kworker/u4:9 Not tainted syzkaller #0 PREEMPT(full)
[ 134.881317][ T1139] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 134.885258][ T1139] Workqueue: events_unbound cfg80211_wiphy_work
[ 134.887869][ T1139] Call Trace:
[ 134.889404][ T1139]
[ 134.890720][ T1139] vpanic+0x56c/0xa60
[ 134.892547][ T1139] ? __pfx__printk+0x10/0x10
[ 134.894480][ T1139] ? __pfx_vpanic+0x10/0x10
[ 134.896553][ T1139] ? is_bpf_text_address+0x292/0x2b0
[ 134.899311][ T1139] ? is_bpf_text_address+0x26/0x2b0
[ 134.901839][ T1139] panic+0xc5/0xd0
[ 134.903690][ T1139] ? __pfx_panic+0x10/0x10
[ 134.905555][ T1139] ? ret_from_fork_asm+0x1a/0x30
[ 134.907702][ T1139] __warn+0x315/0x4c0
[ 134.909452][ T1139] ? ieee80211_tx_h_rate_ctrl+0xd82/0x1760
[ 134.912023][ T1139] ? ieee80211_tx_h_rate_ctrl+0xd82/0x1760
[ 134.914585][ T1139] __report_bug+0x29a/0x540
[ 134.916759][ T1139] ? ieee80211_tx_h_rate_ctrl+0xd82/0x1760
[ 134.919820][ T1139] ? __pfx___report_bug+0x10/0x10
[ 134.921939][ T1139] ? stack_trace_save+0xa9/0x100
[ 134.923963][ T1139] ? kasan_save_track+0x4f/0x80
[ 134.926101][ T1139] ? kasan_save_track+0x3e/0x80
[ 134.928093][ T1139] ? __kasan_slab_alloc+0x6c/0x80
[ 134.930198][ T1139] report_bug_entry+0x19a/0x290
[ 134.932424][ T1139] ? ieee80211_tx_h_rate_ctrl+0xded/0x1760
[ 134.935122][ T1139] ? ieee80211_tx_h_rate_ctrl+0xdf2/0x1760
[ 134.937792][ T1139] handle_bug+0xce/0x200
[ 134.940052][ T1139] exc_invalid_op+0x1a/0x50
[ 134.942451][ T1139] asm_exc_invalid_op+0x1a/0x20
[ 134.945140][ T1139] RIP: 0010:ieee80211_tx_h_rate_ctrl+0xded/0x1760
[ 134.948049][ T1139] Code: 1c 08 00 00 48 8b 44 24 38 8b 30 45 31 ed 83 e6 07 41 0f 95 c5 31 ff e8 41 1b a1 f6 43 8d 4c 6d 02 48 89 df 4c 89 f6 4c 89 fa <67> 48 0f b9 3a 41 bd 01 00 00 00 e9 73 01 00 00 e8 de 16 a1 f6 e9
[ 134.956308][ T1139] RSP: 0018:ffffc90001807420 EFLAGS: 00010293
[ 134.959226][ T1139] RAX: ffffffff8b24af1f RBX: ffffffff9041ed50 RCX: 0000000000000005
[ 134.962606][ T1139] RDX: ffff8880124d3784 RSI: ffff8880573e1888 RDI: ffffffff9041ed50
[ 134.966010][ T1139] RBP: ffffc90001807588 R08: ffff888057b02a8f R09: 1ffff1100af60551
[ 134.969160][ T1139] R10: dffffc0000000000 R11: ffffed100af60552 R12: dffffc0000000000
[ 134.973152][ T1139] R13: 0000000000000001 R14: ffff8880573e1888 R15: ffff8880124d3784
[ 134.977011][ T1139] ? ieee80211_tx_h_rate_ctrl+0xddf/0x1760
[ 134.979701][ T1139] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10
[ 134.982401][ T1139] ? ieee80211_is_bufferable_mmpdu+0x103/0x200
[ 134.985135][ T1139] invoke_tx_handlers_late+0xba/0x18a0
[ 134.987545][ T1139] ? invoke_tx_handlers_early+0xa0c/0x1d50
[ 134.990113][ T1139] ieee80211_tx+0x2d7/0x4b0
[ 134.992392][ T1139] ? __pfx_ieee80211_tx+0x10/0x10
[ 134.995214][ T1139] ? __ieee80211_tx_skb_tid_band+0x4cb/0x680
[ 134.998077][ T1139] __ieee80211_tx_skb_tid_band+0x50f/0x680
[ 135.000465][ T1139] ? ieee80211_scan_state_send_probe+0x4e8/0xa00
[ 135.003150][ T1139] ieee80211_scan_state_send_probe+0x594/0xa00
[ 135.005891][ T1139] ieee80211_scan_work+0x64d/0x1c60
[ 135.008240][ T1139] cfg80211_wiphy_work+0x2cf/0x460
[ 135.010470][ T1139] ? process_scheduled_works+0xa70/0x1860
[ 135.013064][ T1139] process_scheduled_works+0xb5d/0x1860
[ 135.015342][ T1139] ? __pfx_process_scheduled_works+0x10/0x10
[ 135.017966][ T1139] ? assign_work+0x3d5/0x5e0
[ 135.020382][ T1139] worker_thread+0xa53/0xfc0
[ 135.022586][ T1139] kthread+0x389/0x470
[ 135.024435][ T1139] ? __pfx_worker_thread+0x10/0x10
[ 135.026453][ T1139] ? __pfx_kthread+0x10/0x10
[ 135.028281][ T1139] ret_from_fork+0x514/0xb70
[ 135.030222][ T1139] ? __pfx_ret_from_fork+0x10/0x10
[ 135.032564][ T1139] ? __switch_to+0xc79/0x1410
[ 135.034694][ T1139] ? __pfx_kthread+0x10/0x10
[ 135.036882][ T1139] ret_from_fork_asm+0x1a/0x30
[ 135.039013][ T1139]
[ 135.040782][ T1139] Kernel Offset: disabled
[ 135.042698][ T1139] Rebooting in 86400 seconds..