[ 99.508386][ T29] audit: type=1400 audit(1778499172.375:196): avc: denied { write } for pid=5977 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 99.566619][ T29] audit: type=1400 audit(1778499172.435:197): avc: denied { write } for pid=5988 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
Warning: Permanently added '10.128.0.148' (ED25519) to the list of known hosts.
2026/05/11 11:32:58 parsed 1 programs
[ 106.053931][ T29] audit: type=1400 audit(1778499178.925:198): avc: denied { node_bind } for pid=6001 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[ 108.373266][ T29] audit: type=1400 audit(1778499181.245:199): avc: denied { mounton } for pid=6009 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[ 108.404235][ T29] audit: type=1400 audit(1778499181.275:200): avc: denied { unlink } for pid=6009 comm="syz-executor" name="swap-file" dev="sda1" ino=2027 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
Setting up swapspace version 1, size = 127995904 bytes
[ 109.690768][ T6009] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 111.737425][ T29] audit: type=1400 audit(1778499184.605:201): avc: denied { unmount } for pid=6017 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[ 112.026177][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 112.037495][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 112.059612][ T1352] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 112.068186][ T1352] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 112.807009][ T29] audit: type=1401 audit(1778499185.675:202): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768"
[ 113.242085][ T6045] bridge0: port 1(bridge_slave_0) entered blocking state
[ 113.249299][ T6045] bridge0: port 1(bridge_slave_0) entered disabled state
[ 113.256500][ T6045] bridge_slave_0: entered allmulticast mode
[ 113.263883][ T6045] bridge_slave_0: entered promiscuous mode
[ 113.271200][ T6045] bridge0: port 2(bridge_slave_1) entered blocking state
[ 113.279122][ T6045] bridge0: port 2(bridge_slave_1) entered disabled state
[ 113.286496][ T6045] bridge_slave_1: entered allmulticast mode
[ 113.294107][ T6045] bridge_slave_1: entered promiscuous mode
[ 113.314880][ T6045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 113.326452][ T6045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 113.352360][ T6045] team0: Port device team_slave_0 added
[ 113.360001][ T6045] team0: Port device team_slave_1 added
[ 113.379118][ T6045] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 113.387062][ T6045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 113.413242][ T6045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 113.425122][ T6045] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 113.432144][ T6045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 113.458444][ T6045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 113.489694][ T6045] hsr_slave_0: entered promiscuous mode
[ 113.495818][ T6045] hsr_slave_1: entered promiscuous mode
[ 113.730794][ T29] audit: type=1400 audit(1778499186.595:203): avc: denied { write } for pid=6061 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 113.800831][ T29] audit: type=1400 audit(1778499186.665:204): avc: denied { write } for pid=6072 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 113.975592][ T6045] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 113.985770][ T6045] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 113.994921][ T6045] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 114.005153][ T6045] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 114.013207][ T6045] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 114.024301][ T6045] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 114.032155][ T6045] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 114.045346][ T6045] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 114.072875][ T6045] bridge0: port 2(bridge_slave_1) entered blocking state
[ 114.079998][ T6045] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 114.087421][ T6045] bridge0: port 1(bridge_slave_0) entered blocking state
[ 114.094552][ T6045] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 114.102298][ T29] audit: type=1400 audit(1778499186.965:205): avc: denied { write } for pid=6074 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 114.155200][ T48] bridge0: port 1(bridge_slave_0) entered disabled state
[ 114.162985][ T48] bridge0: port 2(bridge_slave_1) entered disabled state
[ 114.177533][ T29] audit: type=1400 audit(1778499187.045:206): avc: denied { write } for pid=6091 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 114.227360][ T6045] 8021q: adding VLAN 0 to HW filter on device bond0
[ 114.249757][ T6045] 8021q: adding VLAN 0 to HW filter on device team0
[ 114.264626][ T1352] bridge0: port 1(bridge_slave_0) entered blocking state
[ 114.271768][ T1352] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 114.303465][ T1352] bridge0: port 2(bridge_slave_1) entered blocking state
[ 114.310612][ T1352] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 114.475285][ T29] audit: type=1400 audit(1778499187.345:207): avc: denied { write } for pid=6093 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 114.560880][ T29] audit: type=1400 audit(1778499187.425:208): avc: denied { write } for pid=6109 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 114.759855][ T6045] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 114.807924][ T6045] veth0_vlan: entered promiscuous mode
[ 114.823901][ T6045] veth1_vlan: entered promiscuous mode
[ 114.857441][ T6045] veth0_macvtap: entered promiscuous mode
[ 114.867465][ T6045] veth1_macvtap: entered promiscuous mode
[ 114.889310][ T29] audit: type=1400 audit(1778499187.755:209): avc: denied { write } for pid=6113 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 114.918067][ T6045] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 114.940190][ T6045] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 114.959048][ T48] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 114.969271][ T48] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 114.981381][ T48] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 114.996185][ T29] audit: type=1400 audit(1778499187.865:210): avc: denied { write } for pid=6127 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 115.020923][ T48] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 115.204495][ T48] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 115.304092][ T48] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 115.616353][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 115.625111][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 115.636397][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 115.645724][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 115.656478][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 116.384314][ T48] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 116.877342][ T29] kauditd_printk_skb: 6 callbacks suppressed
[ 116.877357][ T29] audit: type=1400 audit(1778499189.745:217): avc: denied { write } for pid=6194 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 116.989358][ T29] audit: type=1400 audit(1778499189.855:218): avc: denied { write } for pid=6215 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 117.368607][ T29] audit: type=1400 audit(1778499190.235:219): avc: denied { write } for pid=6220 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 117.427442][ T48] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 117.446348][ T29] audit: type=1400 audit(1778499190.315:220): avc: denied { write } for pid=6239 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 117.797884][ T29] audit: type=1400 audit(1778499190.665:221): avc: denied { write } for pid=6242 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
2026/05/11 11:33:10 executed programs: 0
[ 117.878507][ T29] audit: type=1400 audit(1778499190.745:222): avc: denied { write } for pid=6253 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 117.977591][ T4930] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 117.986522][ T4930] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 117.994450][ T4930] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 118.003576][ T4930] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 118.011405][ T4930] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 118.123624][ T48] bridge_slave_1: left allmulticast mode
[ 118.129849][ T48] bridge_slave_1: left promiscuous mode
[ 118.136404][ T48] bridge0: port 2(bridge_slave_1) entered disabled state
[ 118.146879][ T48] bridge_slave_0: left allmulticast mode
[ 118.155057][ T48] bridge_slave_0: left promiscuous mode
[ 118.160785][ T48] bridge0: port 1(bridge_slave_0) entered disabled state
[ 118.305525][ T29] audit: type=1400 audit(1778499191.175:223): avc: denied { write } for pid=6257 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 118.345126][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 118.357723][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 118.368748][ T48] bond0 (unregistering): Released all slaves
[ 118.406523][ T29] audit: type=1400 audit(1778499191.275:224): avc: denied { write } for pid=6271 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 118.479846][ T48] hsr_slave_0: left promiscuous mode
[ 118.489977][ T48] hsr_slave_1: left promiscuous mode
[ 118.500108][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 118.507828][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 118.517102][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 118.524679][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 118.537536][ T48] veth1_macvtap: left promiscuous mode
[ 118.543343][ T48] veth0_macvtap: left promiscuous mode
[ 118.548887][ T48] veth1_vlan: left promiscuous mode
[ 118.554424][ T48] veth0_vlan: left promiscuous mode
[ 118.748710][ T29] audit: type=1400 audit(1778499191.615:225): avc: denied { write } for pid=6275 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 118.831923][ T48] team0 (unregistering): Port device team_slave_1 removed
[ 118.839098][ T29] audit: type=1400 audit(1778499191.705:226): avc: denied { write } for pid=6286 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 118.871617][ T48] team0 (unregistering): Port device team_slave_0 removed
[ 119.470369][ T6256] bridge0: port 1(bridge_slave_0) entered blocking state
[ 119.477633][ T6256] bridge0: port 1(bridge_slave_0) entered disabled state
[ 119.485194][ T6256] bridge_slave_0: entered allmulticast mode
[ 119.492947][ T6256] bridge_slave_0: entered promiscuous mode
[ 119.501191][ T6256] bridge0: port 2(bridge_slave_1) entered blocking state
[ 119.508397][ T6256] bridge0: port 2(bridge_slave_1) entered disabled state
[ 119.515731][ T6256] bridge_slave_1: entered allmulticast mode
[ 119.523619][ T6256] bridge_slave_1: entered promiscuous mode
[ 119.560919][ T6256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 119.573261][ T6256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 119.898991][ T6256] team0: Port device team_slave_0 added
[ 119.905771][ T5273] 8021q: adding VLAN 0 to HW filter on device eth1
[ 119.918113][ T6256] team0: Port device team_slave_1 added
[ 119.956168][ T6256] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 119.966100][ T6256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 119.992504][ T6256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 120.005088][ T6256] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 120.012159][ T6256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 120.038202][ T6256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 120.071451][ T50] Bluetooth: hci0: command tx timeout
[ 120.106128][ T6256] hsr_slave_0: entered promiscuous mode
[ 120.112665][ T6256] hsr_slave_1: entered promiscuous mode
[ 120.497847][ T5273] 8021q: adding VLAN 0 to HW filter on device eth2
[ 120.874904][ T6256] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 120.890948][ T6256] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 120.899311][ T6256] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 120.910112][ T6256] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 120.919198][ T6256] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 120.930442][ T6256] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 120.938636][ T6256] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 120.948856][ T6256] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 121.035385][ T6256] 8021q: adding VLAN 0 to HW filter on device bond0
[ 121.059099][ T6256] 8021q: adding VLAN 0 to HW filter on device team0
[ 121.072237][ T48] bridge0: port 1(bridge_slave_0) entered blocking state
[ 121.079358][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 121.096959][ T1123] bridge0: port 2(bridge_slave_1) entered blocking state
[ 121.104113][ T1123] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 121.385775][ T6256] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 121.423222][ T6256] veth0_vlan: entered promiscuous mode
[ 121.432938][ T6256] veth1_vlan: entered promiscuous mode
[ 121.454981][ T6256] veth0_macvtap: entered promiscuous mode
[ 121.464289][ T6256] veth1_macvtap: entered promiscuous mode
[ 121.478522][ T6256] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 121.492334][ T6256] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 121.506126][ T57] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 121.517242][ T57] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 121.527962][ T57] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 121.538664][ T57] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 121.588066][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 121.599972][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 121.620541][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 121.628789][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 121.668853][ T6384] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17'.
[ 121.716152][ T6386] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18'.
[ 121.749330][ T6388] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19'.
[ 121.782152][ T6390] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20'.
[ 121.811155][ T6392] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21'.
[ 121.840801][ T6394] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22'.
[ 121.875980][ T6396] netlink: 4 bytes leftover after parsing attributes in process `syz.0.23'.
[ 121.905739][ T6398] netlink: 4 bytes leftover after parsing attributes in process `syz.0.24'.
[ 121.934121][ T6400] netlink: 4 bytes leftover after parsing attributes in process `syz.0.25'.
[ 121.966575][ T6402] netlink: 4 bytes leftover after parsing attributes in process `syz.0.26'.
[ 122.151717][ T50] Bluetooth: hci0: command tx timeout
2026/05/11 11:33:15 executed programs: 51
[ 124.232965][ T50] Bluetooth: hci0: command tx timeout
[ 125.855455][ T1352] ------------[ cut here ]------------
[ 125.860948][ T1352] roc->started
[ 125.860956][ T1352] WARNING: net/mac80211/offchannel.c:404 at ieee80211_start_next_roc+0x256/0x2d0, CPU#1: kworker/u8:8/1352
[ 125.876543][ T1352] Modules linked in:
[ 125.880747][ T1352] CPU: 1 UID: 0 PID: 1352 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full)
[ 125.890651][ T1352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 125.901082][ T1352] Workqueue: events_unbound cfg80211_wiphy_work
[ 125.907605][ T1352] RIP: 0010:ieee80211_start_next_roc+0x256/0x2d0
[ 125.914153][ T1352] Code: d9 ff e8 8d 88 0b f7 48 83 c4 10 5b 5d e9 c2 9c 90 00 e8 7d 88 0b f7 48 89 df e8 15 60 ff ff e9 36 ff ff ff e8 6b 88 0b f7 90 <0f> 0b 90 e9 28 ff ff ff 48 c7 c7 e4 e1 d7 90 e8 c6 46 79 f7 e9 d1
[ 125.933840][ T1352] RSP: 0018:ffffc90005de7a48 EFLAGS: 00010293
[ 125.939918][ T1352] RAX: 0000000000000000 RBX: ffff888079060f20 RCX: ffffffff8afd1d36
[ 125.947913][ T1352] RDX: ffff88802a2d4a00 RSI: ffffffff8afd1e75 RDI: ffff88802a2d4a00
[ 125.955926][ T1352] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000
[ 125.963943][ T1352] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001
[ 125.971954][ T1352] R13: ffff888079060f20 R14: dffffc0000000000 R15: ffff8880790629e0
[ 125.979922][ T1352] FS: 0000000000000000(0000) GS:ffff888124472000(0000) knlGS:0000000000000000
[ 125.988878][ T1352] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 125.995502][ T1352] CR2: 00007f2544872700 CR3: 000000002d26c000 CR4: 00000000003526f0
[ 126.003644][ T1352] Call Trace:
[ 126.006922][ T1352]
[ 126.009832][ T1352] __ieee80211_scan_completed+0x4fd/0xe40
[ 126.015705][ T1352] ieee80211_scan_work+0x472/0x1ff0
[ 126.020910][ T1352] ? __lock_acquire+0x4a5/0x2630
[ 126.025878][ T1352] ? do_raw_spin_lock+0x128/0x260
[ 126.030907][ T1352] ? __pfx_ieee80211_scan_work+0x10/0x10
[ 126.036553][ T1352] ? rcu_is_watching+0x12/0xc0
[ 126.041367][ T1352] cfg80211_wiphy_work+0x410/0x570
[ 126.046474][ T1352] process_one_work+0xa0e/0x1980
[ 126.051456][ T1352] ? __pfx_process_one_work+0x10/0x10
[ 126.056833][ T1352] ? __pfx_cfg80211_wiphy_work+0x10/0x10
[ 126.062477][ T1352] worker_thread+0x5ef/0xe50
[ 126.067089][ T1352] ? __pfx_worker_thread+0x10/0x10
[ 126.072282][ T1352] ? kthread+0x13a/0x450
[ 126.076523][ T1352] ? __pfx_worker_thread+0x10/0x10
[ 126.081664][ T1352] kthread+0x370/0x450
[ 126.085732][ T1352] ? __pfx_kthread+0x10/0x10
[ 126.090327][ T1352] ret_from_fork+0x72b/0xd50
[ 126.094975][ T1352] ? __pfx_ret_from_fork+0x10/0x10
[ 126.100222][ T1352] ? __switch_to+0x800/0x1100
[ 126.105039][ T1352] ? __pfx_kthread+0x10/0x10
[ 126.109636][ T1352] ret_from_fork_asm+0x1a/0x30
[ 126.114439][ T1352]
[ 126.117461][ T1352] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 126.124743][ T1352] CPU: 1 UID: 0 PID: 1352 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full)
[ 126.134174][ T1352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 126.144208][ T1352] Workqueue: events_unbound cfg80211_wiphy_work
[ 126.150433][ T1352] Call Trace:
[ 126.153690][ T1352]
[ 126.156600][ T1352] dump_stack_lvl+0x100/0x190
[ 126.161263][ T1352] vpanic+0x552/0x970
[ 126.165231][ T1352] ? __pfx_vpanic+0x10/0x10
[ 126.169721][ T1352] panic+0xd1/0xe0
[ 126.173418][ T1352] ? __pfx_panic+0x10/0x10
[ 126.177817][ T1352] ? check_panic_on_warn+0x1f/0x90
[ 126.182908][ T1352] check_panic_on_warn.cold+0x19/0x34
[ 126.188264][ T1352] ? ieee80211_start_next_roc+0x256/0x2d0
[ 126.193988][ T1352] __warn.cold+0x191/0x328
[ 126.198383][ T1352] __report_bug+0x296/0x3d0
[ 126.202872][ T1352] ? ieee80211_start_next_roc+0x256/0x2d0
[ 126.208573][ T1352] ? __pfx___report_bug+0x10/0x10
[ 126.213577][ T1352] ? lockdep_unlock+0x5a/0xc0
[ 126.218227][ T1352] ? __lock_acquire+0xd73/0x2630
[ 126.223149][ T1352] ? __lock_acquire+0x4a5/0x2630
[ 126.228079][ T1352] ? __lock_acquire+0x4a5/0x2630
[ 126.233008][ T1352] ? ieee80211_start_next_roc+0x256/0x2d0
[ 126.238757][ T1352] report_bug+0xb2/0x220
[ 126.242990][ T1352] ? ieee80211_start_next_roc+0x256/0x2d0
[ 126.248698][ T1352] handle_bug+0x16a/0x2a0
[ 126.253029][ T1352] exc_invalid_op+0x17/0x50
[ 126.257541][ T1352] asm_exc_invalid_op+0x1a/0x20
[ 126.262374][ T1352] RIP: 0010:ieee80211_start_next_roc+0x256/0x2d0
[ 126.268688][ T1352] Code: d9 ff e8 8d 88 0b f7 48 83 c4 10 5b 5d e9 c2 9c 90 00 e8 7d 88 0b f7 48 89 df e8 15 60 ff ff e9 36 ff ff ff e8 6b 88 0b f7 90 <0f> 0b 90 e9 28 ff ff ff 48 c7 c7 e4 e1 d7 90 e8 c6 46 79 f7 e9 d1
[ 126.288307][ T1352] RSP: 0018:ffffc90005de7a48 EFLAGS: 00010293
[ 126.294360][ T1352] RAX: 0000000000000000 RBX: ffff888079060f20 RCX: ffffffff8afd1d36
[ 126.302313][ T1352] RDX: ffff88802a2d4a00 RSI: ffffffff8afd1e75 RDI: ffff88802a2d4a00
[ 126.310263][ T1352] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000
[ 126.318213][ T1352] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001
[ 126.326164][ T1352] R13: ffff888079060f20 R14: dffffc0000000000 R15: ffff8880790629e0
[ 126.334126][ T1352] ? ieee80211_start_next_roc+0x116/0x2d0
[ 126.339835][ T1352] ? ieee80211_start_next_roc+0x255/0x2d0
[ 126.345543][ T1352] ? ieee80211_start_next_roc+0x255/0x2d0
[ 126.351245][ T1352] __ieee80211_scan_completed+0x4fd/0xe40
[ 126.356951][ T1352] ieee80211_scan_work+0x472/0x1ff0
[ 126.362131][ T1352] ? __lock_acquire+0x4a5/0x2630
[ 126.367065][ T1352] ? do_raw_spin_lock+0x128/0x260
[ 126.372079][ T1352] ? __pfx_ieee80211_scan_work+0x10/0x10
[ 126.377696][ T1352] ? rcu_is_watching+0x12/0xc0
[ 126.382455][ T1352] cfg80211_wiphy_work+0x410/0x570
[ 126.387553][ T1352] process_one_work+0xa0e/0x1980
[ 126.392494][ T1352] ? __pfx_process_one_work+0x10/0x10
[ 126.397859][ T1352] ? __pfx_cfg80211_wiphy_work+0x10/0x10
[ 126.403478][ T1352] worker_thread+0x5ef/0xe50
[ 126.408065][ T1352] ? __pfx_worker_thread+0x10/0x10
[ 126.413165][ T1352] ? kthread+0x13a/0x450
[ 126.417389][ T1352] ? __pfx_worker_thread+0x10/0x10
[ 126.422659][ T1352] kthread+0x370/0x450
[ 126.426727][ T1352] ? __pfx_kthread+0x10/0x10
[ 126.431304][ T1352] ret_from_fork+0x72b/0xd50
[ 126.435911][ T1352] ? __pfx_ret_from_fork+0x10/0x10
[ 126.441007][ T1352] ? __switch_to+0x800/0x1100
[ 126.445679][ T1352] ? __pfx_kthread+0x10/0x10
[ 126.450254][ T1352] ret_from_fork_asm+0x1a/0x30
[ 126.455024][ T1352]
[ 126.458485][ T1352] Kernel Offset: disabled
[ 126.462792][ T1352] Rebooting in 86400 seconds..