[ 426.749407][ T1390] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.806575][ T1390] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.866616][ T1390] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.938398][ T1390] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.517223][ T1390] device hsr_slave_0 left promiscuous mode [ 427.524797][ T1390] device hsr_slave_1 left promiscuous mode [ 427.531334][ T1390] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 427.539199][ T1390] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 427.547456][ T1390] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 427.555670][ T1390] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 427.563921][ T1390] device bridge_slave_1 left promiscuous mode [ 427.570452][ T1390] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.580567][ T1390] device bridge_slave_0 left promiscuous mode [ 427.588149][ T1390] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.600554][ T1390] device veth1_macvtap left promiscuous mode [ 427.607493][ T1390] device veth0_macvtap left promiscuous mode [ 427.614086][ T1390] device veth1_vlan left promiscuous mode [ 427.620059][ T1390] device veth0_vlan left promiscuous mode [ 427.736526][ T1390] team0 (unregistering): Port device team_slave_1 removed [ 427.748022][ T1390] team0 (unregistering): Port device team_slave_0 removed [ 427.760223][ T1390] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 427.772716][ T1390] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 427.821650][ T1390] bond0 (unregistering): Released all slaves Warning: Permanently added '10.128.1.70' (ED25519) to the list of known hosts. [ 431.864570][T31394] ------------[ cut here ]------------ [ 431.870424][T31394] WARNING: CPU: 0 PID: 31394 at net/mac80211/offchannel.c:401 ieee80211_start_next_roc+0x194/0x200 [ 431.881447][T31394] Modules linked in: [ 431.885546][T31394] CPU: 0 PID: 31394 Comm: syz-executor336 Not tainted syzkaller #0 [ 431.894756][T31394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 431.905029][T31394] RIP: 0010:ieee80211_start_next_roc+0x194/0x200 [ 431.911397][T31394] Code: ab 24 f8 48 89 df 4c 89 f6 48 89 c2 5b 41 5c 41 5e 41 5f 5d e9 2d a7 0c 00 e8 d8 91 35 f8 0f 0b e9 e6 fe ff ff e8 cc 91 35 f8 <0f> 0b e9 25 ff ff ff 48 c7 c1 44 0c 8a 8d 80 e1 07 80 c1 03 38 c1 [ 431.931989][T31394] RSP: 0018:ffffc9000307f290 EFLAGS: 00010293 [ 431.938273][T31394] RAX: ffffffff89438dd4 RBX: ffff8880235f0da0 RCX: ffff88807ed18000 [ 431.946571][T31394] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 431.954766][T31394] RBP: 0000000000000001 R08: ffff8880234a129f R09: 1ffff11004694253 [ 431.963159][T31394] R10: dffffc0000000000 R11: ffffed1004694254 R12: dffffc0000000000 [ 431.971163][T31394] R13: 0000000000000000 R14: ffff88801f29f6a0 R15: ffff8880235f15dd [ 431.979295][T31394] FS: 000055558738c3c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 431.988685][T31394] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 431.995499][T31394] CR2: 0000000020000200 CR3: 000000007807f000 CR4: 00000000003506f0 [ 432.004002][T31394] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 432.012160][T31394] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 432.020243][T31394] Call Trace: [ 432.023660][T31394] [ 432.026591][T31394] ieee80211_scan_cancel+0x142/0x5d0 [ 432.032056][T31394] ? ieee80211_do_stop+0x192/0x1d00 [ 432.037491][T31394] ieee80211_do_stop+0x19c/0x1d00 [ 432.042545][T31394] ? rcu_exp_sel_wait_wake+0x1b30/0x1b30 [ 432.048495][T31394] ? ieee80211_sdata_stop+0x80/0x80 [ 432.054326][T31394] ? ieee80211_stop_queues_by_reason+0x19c/0x220 [ 432.061480][T31394] ? __might_sleep+0xf0/0xf0 [ 432.066466][T31394] ? ieee80211_get_vif_queues+0x21d/0x390 [ 432.072396][T31394] ieee80211_if_change_type+0x435/0x9c0 [ 432.078093][T31394] ieee80211_change_iface+0x57/0x420 [ 432.083505][T31394] cfg80211_change_iface+0x770/0xeb0 [ 432.088785][T31394] nl80211_set_interface+0x5a7/0x7e0 [ 432.094224][T31394] ? nl80211_dump_interface+0x5c0/0x5c0 [ 432.099887][T31394] ? mutex_lock_nested+0x17/0x20 [ 432.104962][T31394] genl_rcv_msg+0xcea/0xf90 [ 432.109712][T31394] ? genl_bind+0x380/0x380 [ 432.114185][T31394] ? verify_lock_unused+0x140/0x140 [ 432.119439][T31394] ? verify_lock_unused+0x140/0x140 [ 432.124729][T31394] ? nl80211_dump_interface+0x5c0/0x5c0 [ 432.130568][T31394] netlink_rcv_skb+0x1f5/0x440 [ 432.135495][T31394] ? genl_bind+0x380/0x380 [ 432.139943][T31394] ? netlink_ack+0xb50/0xb50 [ 432.144742][T31394] ? __lock_acquire+0x7d10/0x7d10 [ 432.149954][T31394] ? down_read+0x1aa/0x2e0 [ 432.154585][T31394] genl_rcv+0x24/0x40 [ 432.158941][T31394] netlink_unicast+0x774/0x920 [ 432.164277][T31394] netlink_sendmsg+0x8ba/0xbe0 [ 432.169196][T31394] ? netlink_getsockopt+0x570/0x570 [ 432.175066][T31394] ? aa_sock_msg_perm+0x94/0x150 [ 432.180242][T31394] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 432.185850][T31394] ? security_socket_sendmsg+0x7c/0xa0 [ 432.191531][T31394] __sys_sendto+0x46d/0x620 [ 432.196514][T31394] ? __ia32_sys_getpeername+0x80/0x80 [ 432.201907][T31394] ? __lock_acquire+0x7d10/0x7d10 [ 432.206974][T31394] ? lock_chain_count+0x20/0x20 [ 432.211832][T31394] ? vtime_user_exit+0x2c8/0x3e0 [ 432.216932][T31394] __x64_sys_sendto+0xda/0xf0 [ 432.221894][T31394] do_syscall_64+0x4c/0xa0 [ 432.226377][T31394] ? clear_bhb_loop+0x30/0x80 [ 432.231176][T31394] ? clear_bhb_loop+0x30/0x80 [ 432.236238][T31394] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 432.242235][T31394] RIP: 0033:0x7fdecd6d9717 [ 432.246720][T31394] Code: 48 89 fa 4c 89 df e8 48 1f 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 432.266914][T31394] RSP: 002b:00007ffd953b3350 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 432.275773][T31394] RAX: ffffffffffffffda RBX: 000055558738c3c0 RCX: 00007fdecd6d9717 [ 432.283998][T31394] RDX: 0000000000000024 RSI: 00007ffd953b34c0 RDI: 0000000000000006 [ 432.292347][T31394] RBP: 0000000000000006 R08: 00007ffd953b33b4 R09: 000000000000000c [ 432.300365][T31394] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 432.308734][T31394] R13: 0000000000000000 R14: 00007ffd953b34c0 R15: 0000000000000000 [ 432.316751][T31394] [ 432.320100][T31394] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 432.327502][T31394] CPU: 1 PID: 31394 Comm: syz-executor336 Not tainted syzkaller #0 [ 432.335829][T31394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 432.345888][T31394] Call Trace: [ 432.349167][T31394] [ 432.352092][T31394] dump_stack_lvl+0x188/0x250 [ 432.357110][T31394] ? show_regs_print_info+0x20/0x20 [ 432.362657][T31394] ? load_image+0x400/0x400 [ 432.367420][T31394] panic+0x2e5/0x810 [ 432.371401][T31394] ? bpf_jit_dump+0xd0/0xd0 [ 432.376070][T31394] ? ieee80211_start_next_roc+0x194/0x200 [ 432.381910][T31394] __warn+0x248/0x2b0 [ 432.386497][T31394] ? ieee80211_start_next_roc+0x194/0x200 [ 432.392318][T31394] report_bug+0x1b7/0x2e0 [ 432.396765][T31394] handle_bug+0x3a/0x70 [ 432.401099][T31394] exc_invalid_op+0x16/0x40 [ 432.405688][T31394] asm_exc_invalid_op+0x16/0x20 [ 432.410794][T31394] RIP: 0010:ieee80211_start_next_roc+0x194/0x200 [ 432.417221][T31394] Code: ab 24 f8 48 89 df 4c 89 f6 48 89 c2 5b 41 5c 41 5e 41 5f 5d e9 2d a7 0c 00 e8 d8 91 35 f8 0f 0b e9 e6 fe ff ff e8 cc 91 35 f8 <0f> 0b e9 25 ff ff ff 48 c7 c1 44 0c 8a 8d 80 e1 07 80 c1 03 38 c1 [ 432.436907][T31394] RSP: 0018:ffffc9000307f290 EFLAGS: 00010293 [ 432.443340][T31394] RAX: ffffffff89438dd4 RBX: ffff8880235f0da0 RCX: ffff88807ed18000 [ 432.451312][T31394] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 432.459764][T31394] RBP: 0000000000000001 R08: ffff8880234a129f R09: 1ffff11004694253 [ 432.467965][T31394] R10: dffffc0000000000 R11: ffffed1004694254 R12: dffffc0000000000 [ 432.475927][T31394] R13: 0000000000000000 R14: ffff88801f29f6a0 R15: ffff8880235f15dd [ 432.484902][T31394] ? ieee80211_start_next_roc+0x194/0x200 [ 432.490860][T31394] ieee80211_scan_cancel+0x142/0x5d0 [ 432.496163][T31394] ? ieee80211_do_stop+0x192/0x1d00 [ 432.501527][T31394] ieee80211_do_stop+0x19c/0x1d00 [ 432.506651][T31394] ? rcu_exp_sel_wait_wake+0x1b30/0x1b30 [ 432.512353][T31394] ? ieee80211_sdata_stop+0x80/0x80 [ 432.517553][T31394] ? ieee80211_stop_queues_by_reason+0x19c/0x220 [ 432.524042][T31394] ? __might_sleep+0xf0/0xf0 [ 432.528925][T31394] ? ieee80211_get_vif_queues+0x21d/0x390 [ 432.534846][T31394] ieee80211_if_change_type+0x435/0x9c0 [ 432.540637][T31394] ieee80211_change_iface+0x57/0x420 [ 432.546126][T31394] cfg80211_change_iface+0x770/0xeb0 [ 432.551773][T31394] nl80211_set_interface+0x5a7/0x7e0 [ 432.557387][T31394] ? nl80211_dump_interface+0x5c0/0x5c0 [ 432.563133][T31394] ? mutex_lock_nested+0x17/0x20 [ 432.568395][T31394] genl_rcv_msg+0xcea/0xf90 [ 432.573001][T31394] ? genl_bind+0x380/0x380 [ 432.577693][T31394] ? verify_lock_unused+0x140/0x140 [ 432.583048][T31394] ? verify_lock_unused+0x140/0x140 [ 432.588264][T31394] ? nl80211_dump_interface+0x5c0/0x5c0 [ 432.593918][T31394] netlink_rcv_skb+0x1f5/0x440 [ 432.598868][T31394] ? genl_bind+0x380/0x380 [ 432.603363][T31394] ? netlink_ack+0xb50/0xb50 [ 432.608111][T31394] ? __lock_acquire+0x7d10/0x7d10 [ 432.613218][T31394] ? down_read+0x1aa/0x2e0 [ 432.617627][T31394] genl_rcv+0x24/0x40 [ 432.621595][T31394] netlink_unicast+0x774/0x920 [ 432.626363][T31394] netlink_sendmsg+0x8ba/0xbe0 [ 432.631332][T31394] ? netlink_getsockopt+0x570/0x570 [ 432.636698][T31394] ? aa_sock_msg_perm+0x94/0x150 [ 432.641628][T31394] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 432.647162][T31394] ? security_socket_sendmsg+0x7c/0xa0 [ 432.652699][T31394] __sys_sendto+0x46d/0x620 [ 432.657194][T31394] ? __ia32_sys_getpeername+0x80/0x80 [ 432.662577][T31394] ? __lock_acquire+0x7d10/0x7d10 [ 432.667725][T31394] ? lock_chain_count+0x20/0x20 [ 432.672668][T31394] ? vtime_user_exit+0x2c8/0x3e0 [ 432.677603][T31394] __x64_sys_sendto+0xda/0xf0 [ 432.682283][T31394] do_syscall_64+0x4c/0xa0 [ 432.686700][T31394] ? clear_bhb_loop+0x30/0x80 [ 432.691453][T31394] ? clear_bhb_loop+0x30/0x80 [ 432.696224][T31394] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 432.702307][T31394] RIP: 0033:0x7fdecd6d9717 [ 432.706812][T31394] Code: 48 89 fa 4c 89 df e8 48 1f 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 432.727226][T31394] RSP: 002b:00007ffd953b3350 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 432.735810][T31394] RAX: ffffffffffffffda RBX: 000055558738c3c0 RCX: 00007fdecd6d9717 [ 432.744566][T31394] RDX: 0000000000000024 RSI: 00007ffd953b34c0 RDI: 0000000000000006 [ 432.752965][T31394] RBP: 0000000000000006 R08: 00007ffd953b33b4 R09: 000000000000000c [ 432.761300][T31394] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 432.769516][T31394] R13: 0000000000000000 R14: 00007ffd953b34c0 R15: 0000000000000000 [ 432.778046][T31394] [ 432.781722][T31394] Kernel Offset: disabled [ 432.786405][T31394] Rebooting in 86400 seconds..