[ 405.080141][ T4693] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.123928][ T4693] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.181777][ T4693] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.220045][ T4693] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.281451][ T4693] device hsr_slave_0 left promiscuous mode [ 406.316317][ T4693] device hsr_slave_1 left promiscuous mode [ 406.366331][ T4693] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 406.367475][ T4693] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 406.369054][ T4693] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 406.370294][ T4693] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 406.371769][ T4693] device bridge_slave_1 left promiscuous mode [ 406.372947][ T4693] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.416655][ T4693] device bridge_slave_0 left promiscuous mode [ 406.417692][ T4693] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.556152][ T4693] device veth1_macvtap left promiscuous mode [ 406.557121][ T4693] device veth0_macvtap left promiscuous mode [ 406.558231][ T4693] device veth1_vlan left promiscuous mode [ 406.559296][ T4693] device veth0_vlan left promiscuous mode [ 406.668361][ T4693] team0 (unregistering): Port device team_slave_1 removed [ 406.673146][ T4693] team0 (unregistering): Port device team_slave_0 removed [ 406.677780][ T4693] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 406.742065][ T4693] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 406.832188][ T4693] bond0 (unregistering): Released all slaves [ 409.542048][ T4693] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 Warning: Permanently added '10.128.0.106' (ED25519) to the list of known hosts. [ 409.580944][ T4693] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.630565][ T4693] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.730712][ T4693] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.784520][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.785782][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.789442][ T4564] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.790708][ T4564] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.801275][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 409.802882][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 409.817278][ T4682] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.818516][ T4682] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.822993][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 409.832188][ T4544] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.833362][ T4544] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.834726][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 409.836698][ T4682] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.837962][ T4682] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.839297][ T4544] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 409.850428][ T4682] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.851762][ T4682] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.853181][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 409.857273][ T4564] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.858393][ T4564] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.859784][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 409.882345][ T4564] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.883570][ T4564] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.885922][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 409.889114][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.890520][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.891917][ T4544] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 410.008554][ T4693] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.058620][ T4544] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.059996][ T4544] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.217258][ T4693] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.221804][ T4544] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 410.410430][ T4693] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.641437][ T4693] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.136863][ T878] ------------[ cut here ]------------ [ 411.137778][ T878] WARNING: CPU: 0 PID: 878 at net/mac80211/offchannel.c:401 ieee80211_start_next_roc+0x188/0x1f0 [ 411.139582][ T878] Modules linked in: [ 411.140211][ T878] CPU: 0 PID: 878 Comm: syz-executor240 Not tainted syzkaller #0 [ 411.141485][ T878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 411.143161][ T878] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 411.144447][ T878] pc : ieee80211_start_next_roc+0x188/0x1f0 [ 411.145427][ T878] lr : ieee80211_start_next_roc+0x188/0x1f0 [ 411.146446][ T878] sp : ffff80001f8b6fd0 [ 411.147094][ T878] x29: ffff80001f8b6fd0 x28: 1fffe0001d16c556 x27: dfff800000000000 [ 411.148415][ T878] x26: ffff0000daa85800 x25: ffff0000e8b62c50 x24: ffff0000e8b62ae8 [ 411.149743][ T878] x23: ffff0000d74d5298 x22: ffff0000e8b628e0 x21: dfff800000000000 [ 411.151000][ T878] x20: ffff0000c8147c20 x19: ffff0000e8b60e60 x18: 0000000000000000 [ 411.152290][ T878] x17: 0000000000000000 x16: ffff8000082c16d4 x15: 000000000000000a [ 411.153607][ T878] x14: 0000000000000001 x13: 1ffff00003f16dd8 x12: 0000000000ff0100 [ 411.154849][ T878] x11: 0000000000000000 x10: 0000000000000000 x9 : ffff800010b71fb0 [ 411.156088][ T878] x8 : ffff0000c8b08000 x7 : ffff800010b8faf4 x6 : 0000000000000000 [ 411.157356][ T878] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff80001132422c [ 411.158642][ T878] x2 : 0000000000000000 x1 : 0000000000000001 x0 : 0000000000000000 [ 411.159988][ T878] Call trace: [ 411.160533][ T878] ieee80211_start_next_roc+0x188/0x1f0 [ 411.161479][ T878] __ieee80211_scan_completed+0x784/0xbe0 [ 411.162428][ T878] ieee80211_scan_cancel+0xec/0x860 [ 411.163306][ T878] ieee80211_do_stop+0x178/0x1904 [ 411.164119][ T878] ieee80211_if_change_type+0x408/0xbf4 [ 411.164998][ T878] ieee80211_change_iface+0x64/0x384 [ 411.165887][ T878] cfg80211_change_iface+0x764/0x12c8 [ 411.166757][ T878] nl80211_set_interface+0x3d4/0x690 [ 411.167626][ T878] genl_rcv_msg+0x948/0xc18 [ 411.168337][ T878] netlink_rcv_skb+0x210/0x3d8 [ 411.169093][ T878] genl_rcv+0x38/0x50 [ 411.169711][ T878] netlink_unicast+0x624/0x890 [ 411.170534][ T878] netlink_sendmsg+0x6f4/0x9d8 [ 411.171383][ T878] __sys_sendto+0x30c/0x420 [ 411.172130][ T878] __arm64_sys_sendto+0xd8/0xf8 [ 411.172959][ T878] invoke_syscall+0x98/0x2b0 [ 411.173758][ T878] el0_svc_common+0x138/0x258 [ 411.174608][ T878] do_el0_svc+0x58/0x13c [ 411.175310][ T878] el0_svc+0x78/0x1d0 [ 411.175988][ T878] el0t_64_sync_handler+0xcc/0xe4 [ 411.176809][ T878] el0t_64_sync+0x1a0/0x1a4 [ 411.177569][ T878] irq event stamp: 2474 [ 411.178278][ T878] hardirqs last enabled at (2473): [] _raw_spin_unlock_irqrestore+0xa8/0x14c [ 411.180071][ T878] hardirqs last disabled at (2474): [] el1_dbg+0x24/0x80 [ 411.181486][ T878] softirqs last enabled at (2470): [] ieee80211_configure_filter+0x4f4/0xf24 [ 411.183236][ T878] softirqs last disabled at (2468): [] ieee80211_configure_filter+0x32c/0xf24 [ 411.184926][ T878] ---[ end trace aa66bca600e23c57 ]--- [ 411.333033][ T4693] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.418507][ T4693] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.652034][ T4693] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.754027][ T4693] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.115153][ T4693] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.205480][ T4693] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.304424][ T4693] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.481800][ T4693] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.364184][ T4693] device hsr_slave_0 left promiscuous mode [ 417.387288][ T4693] device hsr_slave_1 left promiscuous mode [ 417.476076][ T4693] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 417.477195][ T4693] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 417.478780][ T4693] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 417.479898][ T4693] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 417.481323][ T4693] device bridge_slave_1 left promiscuous mode [ 417.482304][ T4693] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.516879][ T4693] device bridge_slave_0 left promiscuous mode [ 417.518181][ T4693] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.570776][ T4693] device hsr_slave_0 left promiscuous mode [ 417.626293][ T4693] device hsr_slave_1 left promiscuous mode [ 417.716054][ T4693] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 417.717361][ T4693] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 417.718876][ T4693] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 417.720159][ T4693] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 417.721628][ T4693] device bridge_slave_1 left promiscuous mode [ 417.722665][ T4693] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.766956][ T4693] device bridge_slave_0 left promiscuous mode [ 417.767946][ T4693] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.811648][ T4693] device hsr_slave_0 left promiscuous mode [ 417.866464][ T4693] device hsr_slave_1 left promiscuous mode [ 417.956074][ T4693] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 417.957331][ T4693] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 417.959029][ T4693] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 417.960269][ T4693] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 417.961685][ T4693] device bridge_slave_1 left promiscuous mode [ 417.962571][ T4693] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.996729][ T4693] device bridge_slave_0 left promiscuous mode [ 417.997672][ T4693] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.048711][ T4693] device hsr_slave_0 left promiscuous mode [ 418.086157][ T4693] device hsr_slave_1 left promiscuous mode [ 418.196069][ T4693] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 418.197298][ T4693] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 418.199316][ T4693] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 418.200352][ T4693] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 418.201744][ T4693] device bridge_slave_1 left promiscuous mode [ 418.202735][ T4693] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.237043][ T4693] device bridge_slave_0 left promiscuous mode [ 418.238093][ T4693] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.396164][ T4693] device veth1_macvtap left promiscuous mode [ 418.397232][ T4693] device veth0_macvtap left promiscuous mode [ 418.398271][ T4693] device veth1_vlan left promiscuous mode [ 418.399262][ T4693] device veth0_vlan left promiscuous mode [ 418.486404][ T4693] device veth1_macvtap left promiscuous mode [ 418.487488][ T4693] device veth0_macvtap left promiscuous mode [ 418.488432][ T4693] device veth1_vlan left promiscuous mode [ 418.489542][ T4693] device veth0_vlan left promiscuous mode [ 418.576202][ T4693] device veth1_macvtap left promiscuous mode [ 418.577357][ T4693] device veth0_macvtap left promiscuous mode [ 418.578554][ T4693] device veth1_vlan left promiscuous mode [ 418.579474][ T4693] device veth0_vlan left promiscuous mode [ 418.676186][ T4693] device veth1_macvtap left promiscuous mode [ 418.677217][ T4693] device veth0_macvtap left promiscuous mode [ 418.678199][ T4693] device veth1_vlan left promiscuous mode [ 418.679127][ T4693] device veth0_vlan left promiscuous mode [ 418.982389][ T4693] team0 (unregistering): Port device team_slave_1 removed [ 418.987245][ T4693] team0 (unregistering): Port device team_slave_0 removed [ 418.991694][ T4693] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 419.042027][ T4693] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 419.163433][ T4693] bond0 (unregistering): Released all slaves [ 419.303493][ T4693] team0 (unregistering): Port device team_slave_1 removed [ 419.308635][ T4693] team0 (unregistering): Port device team_slave_0 removed [ 419.325481][ T4693] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 419.370577][ T4693] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 419.482424][ T4693] bond0 (unregistering): Released all slaves [ 419.613628][ T4693] team0 (unregistering): Port device team_slave_1 removed [ 419.619288][ T4693] team0 (unregistering): Port device team_slave_0 removed [ 419.623635][ T4693] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 419.650910][ T4693] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 419.782644][ T4693] bond0 (unregistering): Released all slaves [ 419.914309][ T4693] team0 (unregistering): Port device team_slave_1 removed [ 419.919141][ T4693] team0 (unregistering): Port device team_slave_0 removed [ 419.923544][ T4693] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 419.952899][ T4693] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 420.070738][ T4693] bond0 (unregistering): Released all slaves