Warning: Permanently added '10.128.0.205' (ED25519) to the list of known hosts. 2026/04/26 18:23:21 parsed 1 programs [ 56.589632][ T30] audit: type=1400 audit(1777227801.219:62): avc: denied { node_bind } for pid=5597 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 58.640290][ T30] audit: type=1400 audit(1777227803.269:63): avc: denied { mounton } for pid=5604 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 58.664176][ T30] audit: type=1400 audit(1777227803.299:64): avc: denied { mount } for pid=5604 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 58.666781][ T5604] cgroup: Unknown subsys name 'net' [ 58.694140][ T30] audit: type=1400 audit(1777227803.319:65): avc: denied { unmount } for pid=5604 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 58.837283][ T5604] cgroup: Unknown subsys name 'cpuset' [ 58.845254][ T5604] cgroup: Unknown subsys name 'rlimit' [ 58.996719][ T30] audit: type=1400 audit(1777227803.629:66): avc: denied { setattr } for pid=5604 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 59.029852][ T30] audit: type=1400 audit(1777227803.629:67): avc: denied { create } for pid=5604 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.050529][ T30] audit: type=1400 audit(1777227803.629:68): avc: denied { write } for pid=5604 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.077177][ T30] audit: type=1400 audit(1777227803.629:69): avc: denied { read } for pid=5604 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.101928][ T30] audit: type=1400 audit(1777227803.639:70): avc: denied { mounton } for pid=5604 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 59.117597][ T5608] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 59.127293][ T30] audit: type=1400 audit(1777227803.639:71): avc: denied { mount } for pid=5604 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 60.088724][ T5604] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 61.805790][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 61.805805][ T30] audit: type=1400 audit(1777227806.439:76): avc: denied { execmem } for pid=5613 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 61.839065][ T30] audit: type=1400 audit(1777227806.469:77): avc: denied { read } for pid=5614 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 61.860492][ T30] audit: type=1400 audit(1777227806.469:78): avc: denied { open } for pid=5614 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 61.883863][ T30] audit: type=1400 audit(1777227806.469:79): avc: denied { mounton } for pid=5614 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 61.931175][ T30] audit: type=1400 audit(1777227806.559:80): avc: denied { mounton } for pid=5614 comm="syz-executor" path="/root/syzkaller.9Wx6Iw/syz-tmp" dev="sda1" ino=2030 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 61.956322][ T30] audit: type=1400 audit(1777227806.559:81): avc: denied { mount } for pid=5614 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 61.978317][ T30] audit: type=1400 audit(1777227806.569:82): avc: denied { mounton } for pid=5614 comm="syz-executor" path="/root/syzkaller.9Wx6Iw/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 62.003478][ T30] audit: type=1400 audit(1777227806.569:83): avc: denied { mount } for pid=5614 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 62.025282][ T30] audit: type=1400 audit(1777227806.569:84): avc: denied { mounton } for pid=5614 comm="syz-executor" path="/root/syzkaller.9Wx6Iw/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 62.051818][ T30] audit: type=1400 audit(1777227806.569:85): avc: denied { mounton } for pid=5614 comm="syz-executor" path="/root/syzkaller.9Wx6Iw/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=5494 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 62.083745][ T5614] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 63.334622][ T5646] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.342477][ T5646] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.349657][ T5646] bridge_slave_0: entered allmulticast mode [ 63.356341][ T5646] bridge_slave_0: entered promiscuous mode [ 63.367157][ T5646] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.374378][ T5646] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.381522][ T5646] bridge_slave_1: entered allmulticast mode [ 63.388769][ T5646] bridge_slave_1: entered promiscuous mode [ 63.412764][ T5646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.423926][ T5646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.445021][ T5646] team0: Port device team_slave_0 added [ 63.451900][ T5646] team0: Port device team_slave_1 added [ 63.485928][ T5646] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.492883][ T5646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.520080][ T5646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.532132][ T5646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.539136][ T5646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.565089][ T5646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.612265][ T5646] hsr_slave_0: entered promiscuous mode [ 63.620701][ T5646] hsr_slave_1: entered promiscuous mode [ 63.717289][ T5646] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.727942][ T5646] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 63.736376][ T5646] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.748259][ T5646] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 63.755867][ T5646] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.766029][ T5646] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 63.773778][ T5646] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.783274][ T5646] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 63.806786][ T5646] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.814107][ T5646] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.821726][ T5646] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.828872][ T5646] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.866403][ T5646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.880701][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.889299][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.903689][ T5646] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.915599][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.922718][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.933577][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.940771][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.152678][ T5646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.187021][ T5646] veth0_vlan: entered promiscuous mode [ 64.196719][ T5646] veth1_vlan: entered promiscuous mode [ 64.220039][ T5646] veth0_macvtap: entered promiscuous mode [ 64.228992][ T5646] veth1_macvtap: entered promiscuous mode [ 64.246437][ T5646] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.258266][ T5646] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.274494][ T1052] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.284414][ T1052] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.295822][ T1052] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.305322][ T1052] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.407006][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.478054][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.505450][ T1052] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.517633][ T1052] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.538545][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.561114][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.569620][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.620668][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.333844][ T5714] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 65.342255][ T5714] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 65.350588][ T5714] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 65.358923][ T5714] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 65.366671][ T5714] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 65.845459][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.852496][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 2026/04/26 18:23:30 executed programs: 0 [ 66.037531][ T5714] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.046130][ T5714] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.054922][ T5714] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.064534][ T5714] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.071887][ T5714] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 66.353727][ T5730] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.360870][ T5730] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.368065][ T5730] bridge_slave_0: entered allmulticast mode [ 66.374946][ T5730] bridge_slave_0: entered promiscuous mode [ 66.383022][ T5730] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.390324][ T5730] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.397720][ T5730] bridge_slave_1: entered allmulticast mode [ 66.407648][ T5730] bridge_slave_1: entered promiscuous mode [ 66.426966][ T5730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.437708][ T5730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.460789][ T5730] team0: Port device team_slave_0 added [ 66.467776][ T5730] team0: Port device team_slave_1 added [ 66.486759][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.494294][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.520281][ T5730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.531738][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.538787][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.565124][ T5730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.595254][ T5730] hsr_slave_0: entered promiscuous mode [ 66.601818][ T5730] hsr_slave_1: entered promiscuous mode [ 66.607856][ T5730] debugfs: 'hsr0' already exists in 'hsr' [ 66.613752][ T5730] Cannot create hsr debugfs directory [ 67.572747][ T13] bridge_slave_1: left allmulticast mode [ 67.579094][ T13] bridge_slave_1: left promiscuous mode [ 67.586546][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.598182][ T13] bridge_slave_0: left allmulticast mode [ 67.605929][ T13] bridge_slave_0: left promiscuous mode [ 67.612217][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.805875][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 67.819260][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 67.832689][ T13] bond0 (unregistering): Released all slaves [ 67.908197][ T5270] 8021q: adding VLAN 0 to HW filter on device eth1 [ 67.924021][ T13] hsr_slave_0: left promiscuous mode [ 67.929729][ T13] hsr_slave_1: left promiscuous mode [ 67.935721][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.944354][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.952078][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.959573][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.970669][ T13] veth1_macvtap: left promiscuous mode [ 67.976719][ T13] veth0_macvtap: left promiscuous mode [ 67.982215][ T13] veth1_vlan: left promiscuous mode [ 67.987528][ T13] veth0_vlan: left promiscuous mode [ 68.110288][ T13] team0 (unregistering): Port device team_slave_1 removed [ 68.121941][ T13] team0 (unregistering): Port device team_slave_0 removed [ 68.164266][ T4926] Bluetooth: hci0: command tx timeout [ 68.509270][ T5730] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.520322][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 68.529253][ T5730] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.539562][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 68.549886][ T5730] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.560895][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 68.568885][ T5730] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.578205][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 68.893555][ T5730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.950821][ T5730] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.020094][ T84] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.027273][ T84] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.078734][ T84] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.085903][ T84] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.519435][ T5730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.571072][ T5730] veth0_vlan: entered promiscuous mode [ 69.583389][ T5730] veth1_vlan: entered promiscuous mode [ 69.619275][ T5730] veth0_macvtap: entered promiscuous mode [ 69.631290][ T5730] veth1_macvtap: entered promiscuous mode [ 69.651146][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.667558][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.681830][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.710835][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.727891][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.743794][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.826720][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.841864][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.884990][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.894597][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.967041][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 69.967057][ T30] audit: type=1400 audit(1777227814.599:105): avc: denied { create } for pid=5832 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 69.970187][ T5832] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17'. [ 69.984331][ T30] audit: type=1400 audit(1777227814.599:106): avc: denied { ioctl } for pid=5832 comm="syz.0.17" path="socket:[8195]" dev="sockfs" ino=8195 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 70.028524][ T30] audit: type=1400 audit(1777227814.629:107): avc: denied { ioctl } for pid=5832 comm="syz.0.17" path="socket:[8214]" dev="sockfs" ino=8214 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 70.082728][ T5833] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18'. [ 70.117571][ T5834] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19'. [ 70.144115][ T5835] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20'. [ 70.182413][ T5836] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21'. [ 70.211720][ T5837] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22'. [ 70.244349][ T4926] Bluetooth: hci0: command tx timeout [ 70.252521][ T5838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.23'. [ 70.277012][ T5839] netlink: 4 bytes leftover after parsing attributes in process `syz.0.24'. [ 70.305277][ T5840] netlink: 4 bytes leftover after parsing attributes in process `syz.0.25'. [ 70.335496][ T5841] netlink: 4 bytes leftover after parsing attributes in process `syz.0.26'. 2026/04/26 18:23:35 executed programs: 44 [ 72.323195][ T4926] Bluetooth: hci0: command tx timeout [ 74.227623][ T36] ------------[ cut here ]------------ [ 74.233145][ T36] roc->started [ 74.233157][ T36] WARNING: net/mac80211/offchannel.c:404 at ieee80211_start_next_roc+0x256/0x2d0, CPU#1: kworker/u8:2/36 [ 74.248232][ T36] Modules linked in: [ 74.252356][ T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) [ 74.262183][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 74.272569][ T36] Workqueue: events_unbound cfg80211_wiphy_work [ 74.279349][ T36] RIP: 0010:ieee80211_start_next_roc+0x256/0x2d0 [ 74.285949][ T36] Code: d9 ff e8 bd 4d 0c f7 48 83 c4 10 5b 5d c3 cc cc cc cc e8 ad 4d 0c f7 48 89 df e8 15 60 ff ff e9 36 ff ff ff e8 9b 4d 0c f7 90 <0f> 0b 90 e9 28 ff ff ff 48 c7 c7 e4 ba d7 90 e8 76 06 7a f7 e9 d1 [ 74.305916][ T36] RSP: 0018:ffffc90000ac7a48 EFLAGS: 00010293 [ 74.311966][ T36] RAX: 0000000000000000 RBX: ffff888074f90f20 RCX: ffffffff8afc4046 [ 74.319945][ T36] RDX: ffff88802129ca00 RSI: ffffffff8afc4185 RDI: ffff88802129ca00 [ 74.328124][ T36] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 74.336115][ T36] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 74.344091][ T36] R13: ffff888074f90f20 R14: dffffc0000000000 R15: ffff888074f929a0 [ 74.352039][ T36] FS: 0000000000000000(0000) GS:ffff888124479000(0000) knlGS:0000000000000000 [ 74.360972][ T36] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 74.367568][ T36] CR2: 0000555567c724e8 CR3: 0000000037e8e000 CR4: 00000000003526f0 [ 74.375547][ T36] Call Trace: [ 74.378845][ T36] [ 74.381770][ T36] __ieee80211_scan_completed+0x4fd/0xe40 [ 74.387551][ T36] ieee80211_scan_work+0x472/0x1ff0 [ 74.392755][ T36] ? __lock_acquire+0x4a5/0x2630 [ 74.397748][ T36] ? do_raw_spin_lock+0x128/0x260 [ 74.402787][ T36] ? __pfx_ieee80211_scan_work+0x10/0x10 [ 74.403974][ T4926] Bluetooth: hci0: command tx timeout [ 74.408813][ T36] ? rcu_is_watching+0x12/0xc0 [ 74.409069][ T36] cfg80211_wiphy_work+0x410/0x570 [ 74.424544][ T36] process_one_work+0xa0e/0x1980 [ 74.429472][ T36] ? __pfx_process_one_work+0x10/0x10 [ 74.434854][ T36] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 74.440500][ T36] worker_thread+0x5ef/0xe50 [ 74.445103][ T36] ? __pfx_worker_thread+0x10/0x10 [ 74.450216][ T36] ? kthread+0x13a/0x450 [ 74.454463][ T36] ? __pfx_worker_thread+0x10/0x10 [ 74.459582][ T36] kthread+0x370/0x450 [ 74.463654][ T36] ? __pfx_kthread+0x10/0x10 [ 74.468247][ T36] ret_from_fork+0x72b/0xd50 [ 74.472824][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 74.477959][ T36] ? __switch_to+0x800/0x1100 [ 74.482636][ T36] ? __pfx_kthread+0x10/0x10 [ 74.487532][ T36] ret_from_fork_asm+0x1a/0x30 [ 74.492305][ T36] [ 74.495447][ T36] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 74.502723][ T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) [ 74.511984][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 74.522023][ T36] Workqueue: events_unbound cfg80211_wiphy_work [ 74.528263][ T36] Call Trace: [ 74.531521][ T36] [ 74.534432][ T36] dump_stack_lvl+0x100/0x190 [ 74.539098][ T36] vpanic+0x552/0x970 [ 74.543061][ T36] ? __pfx_vpanic+0x10/0x10 [ 74.547550][ T36] panic+0xd1/0xe0 [ 74.551251][ T36] ? __pfx_panic+0x10/0x10 [ 74.555750][ T36] ? check_panic_on_warn+0x1f/0x90 [ 74.560846][ T36] check_panic_on_warn.cold+0x19/0x34 [ 74.566201][ T36] ? ieee80211_start_next_roc+0x256/0x2d0 [ 74.571906][ T36] __warn.cold+0x191/0x328 [ 74.576311][ T36] __report_bug+0x296/0x3d0 [ 74.580793][ T36] ? ieee80211_start_next_roc+0x256/0x2d0 [ 74.586501][ T36] ? __pfx___report_bug+0x10/0x10 [ 74.591506][ T36] ? lockdep_unlock+0x5a/0xc0 [ 74.596164][ T36] ? __lock_acquire+0xd73/0x2630 [ 74.601086][ T36] ? __lock_acquire+0x4a5/0x2630 [ 74.606006][ T36] ? __lock_acquire+0x4a5/0x2630 [ 74.610942][ T36] ? ieee80211_start_next_roc+0x256/0x2d0 [ 74.616651][ T36] report_bug+0xb2/0x220 [ 74.620874][ T36] ? ieee80211_start_next_roc+0x256/0x2d0 [ 74.626579][ T36] handle_bug+0x16a/0x2a0 [ 74.630893][ T36] exc_invalid_op+0x17/0x50 [ 74.635378][ T36] asm_exc_invalid_op+0x1a/0x20 [ 74.640211][ T36] RIP: 0010:ieee80211_start_next_roc+0x256/0x2d0 [ 74.646528][ T36] Code: d9 ff e8 bd 4d 0c f7 48 83 c4 10 5b 5d c3 cc cc cc cc e8 ad 4d 0c f7 48 89 df e8 15 60 ff ff e9 36 ff ff ff e8 9b 4d 0c f7 90 <0f> 0b 90 e9 28 ff ff ff 48 c7 c7 e4 ba d7 90 e8 76 06 7a f7 e9 d1 [ 74.666117][ T36] RSP: 0018:ffffc90000ac7a48 EFLAGS: 00010293 [ 74.672172][ T36] RAX: 0000000000000000 RBX: ffff888074f90f20 RCX: ffffffff8afc4046 [ 74.680124][ T36] RDX: ffff88802129ca00 RSI: ffffffff8afc4185 RDI: ffff88802129ca00 [ 74.688077][ T36] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 74.696031][ T36] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 74.703999][ T36] R13: ffff888074f90f20 R14: dffffc0000000000 R15: ffff888074f929a0 [ 74.711957][ T36] ? ieee80211_start_next_roc+0x116/0x2d0 [ 74.717667][ T36] ? ieee80211_start_next_roc+0x255/0x2d0 [ 74.723379][ T36] ? ieee80211_start_next_roc+0x255/0x2d0 [ 74.729089][ T36] __ieee80211_scan_completed+0x4fd/0xe40 [ 74.734802][ T36] ieee80211_scan_work+0x472/0x1ff0 [ 74.739992][ T36] ? __lock_acquire+0x4a5/0x2630 [ 74.744921][ T36] ? do_raw_spin_lock+0x128/0x260 [ 74.749933][ T36] ? __pfx_ieee80211_scan_work+0x10/0x10 [ 74.755570][ T36] ? rcu_is_watching+0x12/0xc0 [ 74.760331][ T36] cfg80211_wiphy_work+0x410/0x570 [ 74.765446][ T36] process_one_work+0xa0e/0x1980 [ 74.770389][ T36] ? __pfx_process_one_work+0x10/0x10 [ 74.775754][ T36] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 74.781376][ T36] worker_thread+0x5ef/0xe50 [ 74.785957][ T36] ? __pfx_worker_thread+0x10/0x10 [ 74.791057][ T36] ? kthread+0x13a/0x450 [ 74.795292][ T36] ? __pfx_worker_thread+0x10/0x10 [ 74.800408][ T36] kthread+0x370/0x450 [ 74.804477][ T36] ? __pfx_kthread+0x10/0x10 [ 74.809059][ T36] ret_from_fork+0x72b/0xd50 [ 74.813641][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 74.818742][ T36] ? __switch_to+0x800/0x1100 [ 74.823406][ T36] ? __pfx_kthread+0x10/0x10 [ 74.827982][ T36] ret_from_fork_asm+0x1a/0x30 [ 74.832741][ T36] [ 74.836013][ T36] Kernel Offset: disabled [ 74.840325][ T36] Rebooting in 86400 seconds..