[ 404.234964][ T4699] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.327976][ T4699] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.388328][ T4699] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.447418][ T4699] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.658410][ T4699] device hsr_slave_0 left promiscuous mode [ 405.676641][ T4699] device hsr_slave_1 left promiscuous mode [ 405.764035][ T4699] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 405.765311][ T4699] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 405.766797][ T4699] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 405.767962][ T4699] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 405.769346][ T4699] device bridge_slave_1 left promiscuous mode [ 405.770421][ T4699] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.794738][ T4699] device bridge_slave_0 left promiscuous mode [ 405.795915][ T4699] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.943398][ T4699] device veth1_macvtap left promiscuous mode [ 405.944372][ T4699] device veth0_macvtap left promiscuous mode [ 405.945282][ T4699] device veth1_vlan left promiscuous mode [ 405.946167][ T4699] device veth0_vlan left promiscuous mode [ 406.051203][ T4699] team0 (unregistering): Port device team_slave_1 removed [ 406.056272][ T4699] team0 (unregistering): Port device team_slave_0 removed [ 406.060805][ T4699] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 406.089441][ T4699] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 406.208958][ T4699] bond0 (unregistering): Released all slaves [ 409.088754][ T4699] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.140189][ T4699] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 Warning: Permanently added '10.128.0.174' (ED25519) to the list of known hosts. [ 409.177205][ T4699] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.228414][ T4699] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.428824][ T4699] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.437575][T28457] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.438940][T28457] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.442856][T28457] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 409.458726][ T5012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.460086][ T5012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.464355][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 409.469546][ T5012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.470903][ T4691] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.472139][ T4691] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.473830][ T5012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.476323][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 409.478509][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 409.499328][ T4699] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.502140][T28457] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.502559][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.505344][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.505612][T28457] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.510617][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 409.512169][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 409.519536][T28457] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.522852][T28457] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.527589][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 409.542439][T28457] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.546517][T28457] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.550206][ T4699] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.561694][ T5012] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.562981][ T5012] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.601067][ T4691] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.602326][ T4691] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.639696][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 409.641888][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 409.645868][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 409.651664][ T4699] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.317268][ T4699] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.511997][ T4699] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.662482][ T4699] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.866096][ T4699] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.498391][ T4699] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.671881][ T4699] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.755306][ T4699] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.911059][ T4699] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.155216][ T938] ------------[ cut here ]------------ [ 416.156313][ T938] WARNING: CPU: 0 PID: 938 at net/mac80211/offchannel.c:401 ieee80211_start_next_roc+0x188/0x1f0 [ 416.157914][ T938] Modules linked in: [ 416.158488][ T938] CPU: 0 PID: 938 Comm: syz-executor142 Not tainted syzkaller #0 [ 416.159673][ T938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 416.161156][ T938] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 416.162326][ T938] pc : ieee80211_start_next_roc+0x188/0x1f0 [ 416.163188][ T938] lr : ieee80211_start_next_roc+0x188/0x1f0 [ 416.164064][ T938] sp : ffff800020116fd0 [ 416.164770][ T938] x29: ffff800020116fd0 x28: 1fffe00018242542 x27: dfff800000000000 [ 416.166174][ T938] x26: ffff0000dc844000 x25: ffff0000c1212bb0 x24: ffff0000c1212a48 [ 416.167540][ T938] x23: ffff0000e5b85298 x22: ffff0000c1212840 x21: dfff800000000000 [ 416.168919][ T938] x20: ffff0000d0758b20 x19: ffff0000c1210dc0 x18: 0000000000000000 [ 416.170332][ T938] x17: 0000000000000000 x16: ffff8000082bf644 x15: 000000000000000a [ 416.171659][ T938] x14: 0000000000ff0100 x13: 1ffff0000282e06b x12: 0000000000ff0100 [ 416.172896][ T938] x11: 0000000000000000 x10: 0000000000000000 x9 : ffff800010ae3b38 [ 416.174136][ T938] x8 : ffff0000d0d4d1c0 x7 : ffff800010b01668 x6 : 0000000000000000 [ 416.175447][ T938] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff80001128675c [ 416.176776][ T938] x2 : 0000000000000000 x1 : 0000000000000001 x0 : 0000000000000000 [ 416.178061][ T938] Call trace: [ 416.178569][ T938] ieee80211_start_next_roc+0x188/0x1f0 [ 416.179412][ T938] __ieee80211_scan_completed+0x764/0xbc8 [ 416.180261][ T938] ieee80211_scan_cancel+0xec/0x878 [ 416.181023][ T938] ieee80211_do_stop+0x158/0x1898 [ 416.181755][ T938] ieee80211_if_change_type+0x408/0xbf8 [ 416.182670][ T938] ieee80211_change_iface+0x64/0x384 [ 416.183558][ T938] cfg80211_change_iface+0x764/0x12d8 [ 416.184421][ T938] nl80211_set_interface+0x3c8/0x67c [ 416.185259][ T938] genl_rcv_msg+0x8b4/0xb6c [ 416.185922][ T938] netlink_rcv_skb+0x208/0x3c4 [ 416.186675][ T938] genl_rcv+0x38/0x50 [ 416.187294][ T938] netlink_unicast+0x624/0x8b0 [ 416.188061][ T938] netlink_sendmsg+0x6e8/0x9cc [ 416.188791][ T938] __sys_sendto+0x2e8/0x3d8 [ 416.189540][ T938] __arm64_sys_sendto+0xd8/0xf8 [ 416.190312][ T938] invoke_syscall+0x98/0x2b8 [ 416.191066][ T938] el0_svc_common+0x138/0x258 [ 416.191806][ T938] do_el0_svc+0x58/0x14c [ 416.192470][ T938] el0_svc+0x78/0x1e0 [ 416.193079][ T938] el0t_64_sync_handler+0xcc/0xe4 [ 416.193851][ T938] el0t_64_sync+0x1a0/0x1a4 [ 416.194546][ T938] irq event stamp: 2488 [ 416.195226][ T938] hardirqs last enabled at (2487): [] _raw_spin_unlock_irqrestore+0xa8/0x14c [ 416.196779][ T938] hardirqs last disabled at (2488): [] el1_dbg+0x24/0x80 [ 416.198033][ T938] softirqs last enabled at (2484): [] ieee80211_configure_filter+0x4f0/0xf30 [ 416.199537][ T938] softirqs last disabled at (2482): [] ieee80211_configure_filter+0x328/0xf30 [ 416.201063][ T938] ---[ end trace bb51dfbb3a8dc2ee ]--- [ 417.029837][ T4699] device hsr_slave_0 left promiscuous mode [ 417.085524][ T4699] device hsr_slave_1 left promiscuous mode [ 417.163294][ T4699] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 417.164564][ T4699] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 417.166258][ T4699] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 417.167548][ T4699] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 417.168946][ T4699] device bridge_slave_1 left promiscuous mode [ 417.169985][ T4699] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.204924][ T4699] device bridge_slave_0 left promiscuous mode [ 417.206105][ T4699] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.256576][ T4699] device hsr_slave_0 left promiscuous mode [ 417.303703][ T4699] device hsr_slave_1 left promiscuous mode [ 417.393294][ T4699] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 417.394487][ T4699] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 417.396019][ T4699] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 417.397241][ T4699] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 417.398663][ T4699] device bridge_slave_1 left promiscuous mode [ 417.399705][ T4699] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.433909][ T4699] device bridge_slave_0 left promiscuous mode [ 417.435030][ T4699] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.486810][ T4699] device hsr_slave_0 left promiscuous mode [ 417.523378][ T4699] device hsr_slave_1 left promiscuous mode [ 417.613270][ T4699] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 417.614606][ T4699] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 417.616204][ T4699] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 417.617311][ T4699] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 417.618728][ T4699] device bridge_slave_1 left promiscuous mode [ 417.619717][ T4699] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.654558][ T4699] device bridge_slave_0 left promiscuous mode [ 417.655668][ T4699] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.696944][ T4699] device hsr_slave_0 left promiscuous mode [ 417.753552][ T4699] device hsr_slave_1 left promiscuous mode [ 417.833277][ T4699] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 417.835048][ T4699] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 417.836809][ T4699] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 417.837882][ T4699] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 417.839367][ T4699] device bridge_slave_1 left promiscuous mode [ 417.840402][ T4699] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.876756][ T4699] device bridge_slave_0 left promiscuous mode [ 417.877715][ T4699] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.013405][ T4699] device veth1_macvtap left promiscuous mode [ 418.014458][ T4699] device veth0_macvtap left promiscuous mode [ 418.015441][ T4699] device veth1_vlan left promiscuous mode [ 418.016360][ T4699] device veth0_vlan left promiscuous mode [ 418.103461][ T4699] device veth1_macvtap left promiscuous mode [ 418.104547][ T4699] device veth0_macvtap left promiscuous mode [ 418.105504][ T4699] device veth1_vlan left promiscuous mode [ 418.106545][ T4699] device veth0_vlan left promiscuous mode [ 418.203369][ T4699] device veth1_macvtap left promiscuous mode [ 418.204422][ T4699] device veth0_macvtap left promiscuous mode [ 418.205409][ T4699] device veth1_vlan left promiscuous mode [ 418.206379][ T4699] device veth0_vlan left promiscuous mode [ 418.293388][ T4699] device veth1_macvtap left promiscuous mode [ 418.294483][ T4699] device veth0_macvtap left promiscuous mode [ 418.295373][ T4699] device veth1_vlan left promiscuous mode [ 418.296522][ T4699] device veth0_vlan left promiscuous mode [ 418.609771][ T4699] team0 (unregistering): Port device team_slave_1 removed [ 418.617744][ T4699] team0 (unregistering): Port device team_slave_0 removed [ 418.622134][ T4699] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 418.669316][ T4699] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 418.770610][ T4699] bond0 (unregistering): Released all slaves [ 418.910195][ T4699] team0 (unregistering): Port device team_slave_1 removed [ 418.916160][ T4699] team0 (unregistering): Port device team_slave_0 removed [ 418.920736][ T4699] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 418.947850][ T4699] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 419.049837][ T4699] bond0 (unregistering): Released all slaves [ 419.173511][ T4699] team0 (unregistering): Port device team_slave_1 removed [ 419.178598][ T4699] team0 (unregistering): Port device team_slave_0 removed [ 419.187985][ T4699] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 419.228427][ T4699] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 419.329799][ T4699] bond0 (unregistering): Released all slaves [ 419.483094][ T4699] team0 (unregistering): Port device team_slave_1 removed [ 419.488674][ T4699] team0 (unregistering): Port device team_slave_0 removed [ 419.497088][ T4699] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 419.547848][ T4699] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 419.659138][ T4699] bond0 (unregistering): Released all slaves