[ 396.696926][ T1637] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.736468][ T1637] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.776235][ T1637] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.836767][ T1637] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.016640][ T1637] device hsr_slave_0 left promiscuous mode [ 398.043638][ T1637] device hsr_slave_1 left promiscuous mode [ 398.153480][ T1637] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 398.154617][ T1637] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 398.156136][ T1637] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 398.157352][ T1637] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 398.158629][ T1637] device bridge_slave_1 left promiscuous mode [ 398.159638][ T1637] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.213918][ T1637] device bridge_slave_0 left promiscuous mode [ 398.214980][ T1637] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.353551][ T1637] device veth1_macvtap left promiscuous mode [ 398.354643][ T1637] device veth0_macvtap left promiscuous mode [ 398.355563][ T1637] device veth1_vlan left promiscuous mode [ 398.356522][ T1637] device veth0_vlan left promiscuous mode [ 398.437309][ T1637] team0 (unregistering): Port device team_slave_1 removed [ 398.441140][ T1637] team0 (unregistering): Port device team_slave_0 removed [ 398.444829][ T1637] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 398.477891][ T1637] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 398.586764][ T1637] bond0 (unregistering): Released all slaves Warning: Permanently added '10.128.0.146' (ED25519) to the list of known hosts. [ 399.235346][T22698] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.236704][T22698] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.238282][T22698] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 399.249477][T22698] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.250770][T22698] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.252093][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 431.213682][T23547] ------------[ cut here ]------------ [ 431.214732][T23547] WARNING: CPU: 0 PID: 23547 at net/mac80211/offchannel.c:401 ieee80211_start_next_roc+0x188/0x1f0 [ 431.216363][T23547] Modules linked in: [ 431.216978][T23547] CPU: 0 PID: 23547 Comm: syz-executor145 Not tainted syzkaller #0 [ 431.218110][T23547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 431.219636][T23547] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 431.220815][T23547] pc : ieee80211_start_next_roc+0x188/0x1f0 [ 431.221726][T23547] lr : ieee80211_start_next_roc+0x188/0x1f0 [ 431.222596][T23547] sp : ffff800020ab7010 [ 431.223216][T23547] x29: ffff800020ab7010 x28: 1fffe0001a12b54e x27: 0000000000000001 [ 431.224782][T23547] x26: dfff800000000000 x25: ffff0000c1f80800 x24: ffff0000d095ac10 [ 431.226272][T23547] x23: ffff80001438d110 x22: ffff0000d095a8a0 x21: dfff800000000000 [ 431.227820][T23547] x20: ffff0000c7811d20 x19: ffff0000d0958e20 x18: 0000000000000000 [ 431.229282][T23547] x17: 0000000000000000 x16: ffff8000082c4ec4 x15: 000000000000000a [ 431.230636][T23547] x14: 0000000000000001 x13: 1ffff00004156de0 x12: 0000000000000000 [ 431.232057][T23547] x11: ff80800010c58a28 x10: 0000000000000000 x9 : ffff800010c58a28 [ 431.233448][T23547] x8 : ffff0000ccb88000 x7 : ffff800010c764d4 x6 : 0000000000000000 [ 431.234876][T23547] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000114163d4 [ 431.236416][T23547] x2 : 0000000000000000 x1 : 0000000000000001 x0 : 0000000000000000 [ 431.238087][T23547] Call trace: [ 431.238739][T23547] ieee80211_start_next_roc+0x188/0x1f0 [ 431.239822][T23547] __ieee80211_scan_completed+0x780/0xbec [ 431.240881][T23547] ieee80211_scan_cancel+0xec/0x864 [ 431.241776][T23547] ieee80211_do_stop+0x170/0x190c [ 431.242609][T23547] ieee80211_if_change_type+0x3fc/0xc0c [ 431.243568][T23547] ieee80211_change_iface+0x64/0x384 [ 431.244549][T23547] cfg80211_change_iface+0x75c/0x12c4 [ 431.245560][T23547] nl80211_set_interface+0x490/0x6ac [ 431.246489][T23547] genl_rcv_msg+0x974/0xc64 [ 431.247262][T23547] netlink_rcv_skb+0x218/0x3dc [ 431.248279][T23547] genl_rcv+0x38/0x50 [ 431.249077][T23547] netlink_unicast+0x614/0x884 [ 431.249937][T23547] netlink_sendmsg+0x6ec/0x9e4 [ 431.250766][T23547] __sys_sendto+0x30c/0x420 [ 431.251533][T23547] __arm64_sys_sendto+0xe4/0x104 [ 431.252426][T23547] invoke_syscall+0x98/0x28c [ 431.253262][T23547] el0_svc_common+0x13c/0x258 [ 431.254083][T23547] do_el0_svc+0x5c/0x140 [ 431.254809][T23547] el0_svc+0x78/0x1d0 [ 431.255483][T23547] el0t_64_sync_handler+0xcc/0xe4 [ 431.256369][T23547] el0t_64_sync+0x1a0/0x1a4 [ 431.257126][T23547] irq event stamp: 2712 [ 431.257826][T23547] hardirqs last enabled at (2711): [] _raw_spin_unlock_irqrestore+0xa8/0x14c [ 431.259568][T23547] hardirqs last disabled at (2712): [] el1_dbg+0x24/0x80 [ 431.260993][T23547] softirqs last enabled at (2708): [] ieee80211_configure_filter+0x4f4/0xf24 [ 431.262778][T23547] softirqs last disabled at (2706): [] ieee80211_configure_filter+0x32c/0xf24 [ 431.264459][T23547] ---[ end trace f537bfa0f6a9006b ]--- [ 438.264525][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 438.265690][ T2065] ieee802154 phy1 wpan1: encryption failed: -22