Warning: Permanently added '10.128.0.252' (ED25519) to the list of known hosts. 2025/12/26 07:59:56 parsed 1 programs [ 71.411374][ T30] audit: type=1400 audit(1766735996.833:62): avc: denied { node_bind } for pid=5808 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 73.569321][ T30] audit: type=1400 audit(1766735998.993:63): avc: denied { mounton } for pid=5816 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 73.592916][ T30] audit: type=1400 audit(1766735999.013:64): avc: denied { mount } for pid=5816 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 73.596458][ T5816] cgroup: Unknown subsys name 'net' [ 73.622082][ T30] audit: type=1400 audit(1766735999.043:65): avc: denied { unmount } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 73.746191][ T5816] cgroup: Unknown subsys name 'cpuset' [ 73.754406][ T5816] cgroup: Unknown subsys name 'rlimit' [ 73.890017][ T30] audit: type=1400 audit(1766735999.313:66): avc: denied { setattr } for pid=5816 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 73.913600][ T30] audit: type=1400 audit(1766735999.313:67): avc: denied { create } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 73.947134][ T30] audit: type=1400 audit(1766735999.313:68): avc: denied { write } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 73.967880][ T30] audit: type=1400 audit(1766735999.313:69): avc: denied { read } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 73.988233][ T30] audit: type=1400 audit(1766735999.343:70): avc: denied { mounton } for pid=5816 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 74.013109][ T30] audit: type=1400 audit(1766735999.343:71): avc: denied { mount } for pid=5816 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 74.041820][ T5819] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 75.040366][ T5816] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.890700][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 76.890715][ T30] audit: type=1400 audit(1766736002.313:76): avc: denied { execmem } for pid=5824 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 77.027964][ T30] audit: type=1400 audit(1766736002.453:77): avc: denied { read } for pid=5826 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 77.081205][ T30] audit: type=1400 audit(1766736002.473:78): avc: denied { open } for pid=5826 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 77.105550][ T30] audit: type=1400 audit(1766736002.473:79): avc: denied { mounton } for pid=5826 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 77.133627][ T30] audit: type=1400 audit(1766736002.563:80): avc: denied { mounton } for pid=5826 comm="syz-executor" path="/root/syzkaller.rDSFuD/syz-tmp" dev="sda1" ino=2030 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 77.157915][ T30] audit: type=1400 audit(1766736002.563:81): avc: denied { mount } for pid=5826 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 77.180055][ T30] audit: type=1400 audit(1766736002.563:82): avc: denied { mounton } for pid=5826 comm="syz-executor" path="/root/syzkaller.rDSFuD/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 77.205555][ T30] audit: type=1400 audit(1766736002.563:83): avc: denied { mount } for pid=5826 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 77.227693][ T30] audit: type=1400 audit(1766736002.563:84): avc: denied { mounton } for pid=5826 comm="syz-executor" path="/root/syzkaller.rDSFuD/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 77.254270][ T30] audit: type=1400 audit(1766736002.563:85): avc: denied { mounton } for pid=5826 comm="syz-executor" path="/root/syzkaller.rDSFuD/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 77.286378][ T5826] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 77.992956][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.001378][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.036880][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.046626][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.249619][ T5859] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.263057][ T5859] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.271011][ T5859] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.278989][ T5859] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.287207][ T5859] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.632167][ T5866] chnl_net:caif_netlink_parms(): no params data found [ 78.714798][ T5866] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.722633][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.730221][ T5866] bridge_slave_0: entered allmulticast mode [ 78.737609][ T5866] bridge_slave_0: entered promiscuous mode [ 78.746892][ T5866] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.754103][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.761247][ T5866] bridge_slave_1: entered allmulticast mode [ 78.768253][ T5866] bridge_slave_1: entered promiscuous mode [ 78.830226][ T5866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.841642][ T5866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.886721][ T5866] team0: Port device team_slave_0 added [ 78.896677][ T5866] team0: Port device team_slave_1 added [ 78.925434][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.932384][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.958565][ T5866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.975993][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.982933][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.008957][ T5866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.043234][ T5866] hsr_slave_0: entered promiscuous mode [ 79.049682][ T5866] hsr_slave_1: entered promiscuous mode [ 79.191055][ T5866] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.202756][ T5866] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.212432][ T5866] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.222255][ T5866] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.281792][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.301701][ T5866] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.313751][ T1133] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.320995][ T1133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.337399][ T1133] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.344550][ T1133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.478959][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.520587][ T5866] veth0_vlan: entered promiscuous mode [ 79.531244][ T5866] veth1_vlan: entered promiscuous mode [ 79.554846][ T5866] veth0_macvtap: entered promiscuous mode [ 79.563271][ T5866] veth1_macvtap: entered promiscuous mode [ 79.579375][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.590981][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.606163][ T1133] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.617188][ T1133] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.627494][ T1133] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.637733][ T1133] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.762708][ T1133] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.828642][ T1133] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.909899][ T1133] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.985404][ T1133] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2025/12/26 08:00:06 executed programs: 0 [ 81.061714][ T5859] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.071083][ T5859] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.078804][ T5859] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.088688][ T5859] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.096855][ T5859] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.219267][ T5926] chnl_net:caif_netlink_parms(): no params data found [ 81.279534][ T5926] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.286939][ T5926] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.294141][ T5926] bridge_slave_0: entered allmulticast mode [ 81.300890][ T5926] bridge_slave_0: entered promiscuous mode [ 81.308952][ T5926] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.316914][ T5926] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.324851][ T5926] bridge_slave_1: entered allmulticast mode [ 81.331620][ T5926] bridge_slave_1: entered promiscuous mode [ 81.364238][ T5926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.375365][ T5926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.401412][ T5926] team0: Port device team_slave_0 added [ 81.409490][ T5926] team0: Port device team_slave_1 added [ 81.434132][ T5926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.441079][ T5926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.467049][ T5926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.479073][ T5926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.486133][ T5926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.512895][ T5926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.565583][ T5926] hsr_slave_0: entered promiscuous mode [ 81.572072][ T5926] hsr_slave_1: entered promiscuous mode [ 81.578326][ T5926] debugfs: 'hsr0' already exists in 'hsr' [ 81.584628][ T5926] Cannot create hsr debugfs directory [ 82.742386][ T1133] bridge_slave_1: left allmulticast mode [ 82.748578][ T1133] bridge_slave_1: left promiscuous mode [ 82.755222][ T1133] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.770050][ T1133] bridge_slave_0: left allmulticast mode [ 82.776416][ T1133] bridge_slave_0: left promiscuous mode [ 82.782079][ T1133] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.961047][ T1133] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 82.972727][ T1133] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 82.982693][ T1133] bond0 (unregistering): Released all slaves [ 83.085069][ T1133] hsr_slave_0: left promiscuous mode [ 83.090973][ T1133] hsr_slave_1: left promiscuous mode [ 83.097274][ T1133] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.105239][ T1133] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.113825][ T1133] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.121227][ T1133] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.144102][ T1133] veth1_macvtap: left promiscuous mode [ 83.149877][ T1133] veth0_macvtap: left promiscuous mode [ 83.156027][ T1133] veth1_vlan: left promiscuous mode [ 83.161473][ T1133] veth0_vlan: left promiscuous mode [ 83.174257][ T51] Bluetooth: hci0: command tx timeout [ 83.522648][ T1133] team0 (unregistering): Port device team_slave_1 removed [ 83.548686][ T1133] team0 (unregistering): Port device team_slave_0 removed [ 83.995508][ T5926] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.007002][ T5926] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.024689][ T5926] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.035345][ T5926] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.362566][ T5926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.391554][ T5926] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.407393][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.414614][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.437833][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.445016][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.857160][ T5926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.906310][ T5926] veth0_vlan: entered promiscuous mode [ 84.916514][ T5926] veth1_vlan: entered promiscuous mode [ 84.939383][ T5926] veth0_macvtap: entered promiscuous mode [ 84.948940][ T5926] veth1_macvtap: entered promiscuous mode [ 84.962515][ T5926] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.975825][ T5926] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.988855][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.997706][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.007971][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.017948][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.067706][ T1133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.081193][ T1133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.106126][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.114341][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.149368][ T5988] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.160437][ T5988] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.173480][ C0] ------------[ cut here ]------------ [ 85.179057][ C0] WARNING: net/wireless/scan.c:1788 at __cfg80211_bss_update+0x1ca9/0x2380, CPU#0: ksoftirqd/0/15 [ 85.189693][ C0] Modules linked in: [ 85.190105][ T5988] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.193742][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) [ 85.193778][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 85.193795][ C0] RIP: 0010:__cfg80211_bss_update+0x1ca9/0x2380 [ 85.193837][ C0] Code: 00 00 00 48 85 db 0f 85 0c fe ff ff e9 4a fe ff ff e8 0b b5 f6 f6 48 8d 7b 98 e8 d2 64 ff ff e9 a8 fe ff ff e8 f8 b4 f6 f6 90 <0f> 0b 90 48 8b 7c 24 40 e8 8a b2 ec f9 31 ff 89 c6 88 44 24 60 e8 [ 85.248681][ C0] RSP: 0018:ffffc900001471d8 EFLAGS: 00010246 [ 85.253510][ T51] Bluetooth: hci0: command tx timeout [ 85.254785][ C0] RAX: 0000000000000000 RBX: 0000000000000002 RCX: ffffffff8ac828be [ 85.268119][ C0] RDX: ffff88801d6e4980 RSI: ffffffff8ac83178 RDI: 0000000000000005 [ 85.276123][ C0] RBP: ffff88807bae4468 R08: 0000000000000005 R09: 0000000000000000 [ 85.284126][ C0] R10: 0000000000000000 R11: 0000000000030000 R12: ffff888031470190 [ 85.292108][ C0] R13: ffff88807bae4400 R14: ffff888025f8fc00 R15: dffffc0000000000 [ 85.300146][ C0] FS: 0000000000000000(0000) GS:ffff8881248f5000(0000) knlGS:0000000000000000 [ 85.309147][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 85.315794][ C0] CR2: 000000c00774a000 CR3: 000000007abee000 CR4: 00000000003526f0 [ 85.323897][ C0] Call Trace: [ 85.327182][ C0] [ 85.330131][ C0] cfg80211_inform_single_bss_data+0x7b9/0x1d30 [ 85.336476][ C0] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 85.343210][ C0] ? __lock_acquire+0x436/0x2890 [ 85.348231][ C0] ? cfg80211_inform_bss_data+0x22b/0x3be0 [ 85.354087][ C0] cfg80211_inform_bss_data+0x22b/0x3be0 [ 85.359743][ C0] ? lock_acquire+0x179/0x330 [ 85.364481][ C0] ? __lock_acquire+0x436/0x2890 [ 85.369537][ C0] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 85.375658][ C0] ? __lock_acquire+0x436/0x2890 [ 85.380624][ C0] ? __lock_acquire+0x436/0x2890 [ 85.385606][ C0] ? lock_acquire+0x179/0x330 [ 85.390311][ C0] ? lock_acquire+0x179/0x330 [ 85.395046][ C0] ? __lock_acquire+0x436/0x2890 [ 85.400014][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 85.406295][ C0] cfg80211_inform_bss_frame_data+0x26f/0x720 [ 85.412433][ C0] ieee80211_bss_info_update+0x310/0xab0 [ 85.418147][ C0] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 85.424378][ C0] ? find_held_lock+0x2b/0x80 [ 85.429109][ C0] ? find_held_lock+0x2b/0x80 [ 85.433835][ C0] ? ieee80211_get_channel_khz+0x14a/0x1e0 [ 85.439658][ C0] ieee80211_scan_rx+0x4cf/0xb30 [ 85.444660][ C0] ? ieee80211_clean_skb+0x1a6/0x740 [ 85.449983][ C0] ieee80211_rx_list+0x1c40/0x2ed0 [ 85.455191][ C0] ? __lock_acquire+0x436/0x2890 [ 85.460149][ C0] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 85.465681][ C0] ? __lock_acquire+0x436/0x2890 [ 85.470656][ C0] ieee80211_rx_napi+0xdc/0x410 [ 85.475579][ C0] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 85.481051][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 85.486327][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 85.492156][ C0] ieee80211_handle_queued_frames+0xcf/0x130 [ 85.498262][ C0] tasklet_action_common+0x254/0x3f0 [ 85.503627][ C0] handle_softirqs+0x219/0x950 [ 85.508429][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 85.513785][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 85.518918][ C0] ? smpboot_thread_fn+0x326/0xae0 [ 85.524095][ C0] run_ksoftirqd+0x3a/0x60 [ 85.528535][ C0] smpboot_thread_fn+0x3f7/0xae0 [ 85.533554][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 85.539026][ C0] kthread+0x3c5/0x780 [ 85.543122][ C0] ? __pfx_kthread+0x10/0x10 [ 85.547784][ C0] ? rcu_is_watching+0x12/0xc0 [ 85.552560][ C0] ? __pfx_kthread+0x10/0x10 [ 85.557213][ C0] ret_from_fork+0x983/0xb10 [ 85.561820][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 85.566990][ C0] ? __switch_to+0x7af/0x10d0 [ 85.571698][ C0] ? __pfx_kthread+0x10/0x10 [ 85.576367][ C0] ret_from_fork_asm+0x1a/0x30 [ 85.581171][ C0] [ 85.584246][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 85.591528][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) [ 85.600749][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 85.610819][ C0] Call Trace: [ 85.614102][ C0] [ 85.617029][ C0] dump_stack_lvl+0x3d/0x1f0 [ 85.621643][ C0] vpanic+0x640/0x6f0 [ 85.625639][ C0] ? __cfg80211_bss_update+0x1ca9/0x2380 [ 85.631285][ C0] panic+0xca/0xd0 [ 85.635018][ C0] ? __pfx_panic+0x10/0x10 [ 85.639457][ C0] ? check_panic_on_warn+0x1f/0xb0 [ 85.644586][ C0] check_panic_on_warn+0xab/0xb0 [ 85.649551][ C0] __warn+0x108/0x3c0 [ 85.653563][ C0] __report_bug+0x2a0/0x520 [ 85.658081][ C0] ? __cfg80211_bss_update+0x1ca9/0x2380 [ 85.663730][ C0] ? __pfx___report_bug+0x10/0x10 [ 85.668781][ C0] ? __cfg80211_bss_update+0x1ca9/0x2380 [ 85.674425][ C0] report_bug+0xb2/0x220 [ 85.678675][ C0] ? __cfg80211_bss_update+0x1ca9/0x2380 [ 85.684325][ C0] handle_bug+0x127/0x260 [ 85.688681][ C0] exc_invalid_op+0x17/0x50 [ 85.693210][ C0] asm_exc_invalid_op+0x1a/0x20 [ 85.698073][ C0] RIP: 0010:__cfg80211_bss_update+0x1ca9/0x2380 [ 85.704332][ C0] Code: 00 00 00 48 85 db 0f 85 0c fe ff ff e9 4a fe ff ff e8 0b b5 f6 f6 48 8d 7b 98 e8 d2 64 ff ff e9 a8 fe ff ff e8 f8 b4 f6 f6 90 <0f> 0b 90 48 8b 7c 24 40 e8 8a b2 ec f9 31 ff 89 c6 88 44 24 60 e8 [ 85.723943][ C0] RSP: 0018:ffffc900001471d8 EFLAGS: 00010246 [ 85.730014][ C0] RAX: 0000000000000000 RBX: 0000000000000002 RCX: ffffffff8ac828be [ 85.737986][ C0] RDX: ffff88801d6e4980 RSI: ffffffff8ac83178 RDI: 0000000000000005 [ 85.745952][ C0] RBP: ffff88807bae4468 R08: 0000000000000005 R09: 0000000000000000 [ 85.753919][ C0] R10: 0000000000000000 R11: 0000000000030000 R12: ffff888031470190 [ 85.761883][ C0] R13: ffff88807bae4400 R14: ffff888025f8fc00 R15: dffffc0000000000 [ 85.769856][ C0] ? __cfg80211_bss_update+0x13ee/0x2380 [ 85.775498][ C0] ? __cfg80211_bss_update+0x1ca8/0x2380 [ 85.781137][ C0] ? __cfg80211_bss_update+0x1ca8/0x2380 [ 85.786786][ C0] cfg80211_inform_single_bss_data+0x7b9/0x1d30 [ 85.793044][ C0] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 85.799756][ C0] ? __lock_acquire+0x436/0x2890 [ 85.804714][ C0] ? cfg80211_inform_bss_data+0x22b/0x3be0 [ 85.810540][ C0] cfg80211_inform_bss_data+0x22b/0x3be0 [ 85.816186][ C0] ? lock_acquire+0x179/0x330 [ 85.820874][ C0] ? __lock_acquire+0x436/0x2890 [ 85.825818][ C0] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 85.831890][ C0] ? __lock_acquire+0x436/0x2890 [ 85.836833][ C0] ? __lock_acquire+0x436/0x2890 [ 85.841780][ C0] ? lock_acquire+0x179/0x330 [ 85.846468][ C0] ? lock_acquire+0x179/0x330 [ 85.851182][ C0] ? __lock_acquire+0x436/0x2890 [ 85.856159][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 85.862336][ C0] cfg80211_inform_bss_frame_data+0x26f/0x720 [ 85.868423][ C0] ieee80211_bss_info_update+0x310/0xab0 [ 85.874096][ C0] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 85.880272][ C0] ? find_held_lock+0x2b/0x80 [ 85.884970][ C0] ? find_held_lock+0x2b/0x80 [ 85.889659][ C0] ? ieee80211_get_channel_khz+0x14a/0x1e0 [ 85.895495][ C0] ieee80211_scan_rx+0x4cf/0xb30 [ 85.900452][ C0] ? ieee80211_clean_skb+0x1a6/0x740 [ 85.905744][ C0] ieee80211_rx_list+0x1c40/0x2ed0 [ 85.910863][ C0] ? __lock_acquire+0x436/0x2890 [ 85.915809][ C0] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 85.921266][ C0] ? __lock_acquire+0x436/0x2890 [ 85.926227][ C0] ieee80211_rx_napi+0xdc/0x410 [ 85.931169][ C0] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 85.936627][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 85.941837][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 85.947740][ C0] ieee80211_handle_queued_frames+0xcf/0x130 [ 85.953741][ C0] tasklet_action_common+0x254/0x3f0 [ 85.959133][ C0] handle_softirqs+0x219/0x950 [ 85.963916][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 85.969221][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 85.974343][ C0] ? smpboot_thread_fn+0x326/0xae0 [ 85.979453][ C0] run_ksoftirqd+0x3a/0x60 [ 85.983892][ C0] smpboot_thread_fn+0x3f7/0xae0 [ 85.988838][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 85.994302][ C0] kthread+0x3c5/0x780 [ 85.998377][ C0] ? __pfx_kthread+0x10/0x10 [ 86.002971][ C0] ? rcu_is_watching+0x12/0xc0 [ 86.007733][ C0] ? __pfx_kthread+0x10/0x10 [ 86.012335][ C0] ret_from_fork+0x983/0xb10 [ 86.016944][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 86.022084][ C0] ? __switch_to+0x7af/0x10d0 [ 86.026778][ C0] ? __pfx_kthread+0x10/0x10 [ 86.031375][ C0] ret_from_fork_asm+0x1a/0x30 [ 86.036182][ C0] [ 86.039501][ C0] Kernel Offset: disabled [ 86.043815][ C0] Rebooting in 86400 seconds..