[ 426.381113][ T9] device hsr_slave_0 left promiscuous mode [ 426.389647][ T9] device hsr_slave_1 left promiscuous mode [ 426.396521][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 426.404720][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 426.414539][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 426.422514][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 426.431758][ T9] device bridge_slave_1 left promiscuous mode [ 426.438885][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.448642][ T9] device bridge_slave_0 left promiscuous mode [ 426.455836][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.469587][ T9] device veth1_macvtap left promiscuous mode [ 426.476092][ T9] device veth0_macvtap left promiscuous mode [ 426.484668][ T9] device veth1_vlan left promiscuous mode [ 426.491671][ T9] device veth0_vlan left promiscuous mode [ 426.603488][ T9] team0 (unregistering): Port device team_slave_1 removed [ 426.615348][ T9] team0 (unregistering): Port device team_slave_0 removed [ 426.628874][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 426.641691][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 426.685318][ T9] bond0 (unregistering): Released all slaves Warning: Permanently added '10.128.1.104' (ED25519) to the list of known hosts. [ 433.880070][T30835] ------------[ cut here ]------------ [ 433.885988][T30835] WARNING: CPU: 0 PID: 30835 at net/mac80211/offchannel.c:401 ieee80211_start_next_roc+0x194/0x200 [ 433.897498][T30835] Modules linked in: [ 433.901566][T30835] CPU: 1 PID: 30835 Comm: syz-executor165 Not tainted syzkaller #0 [ 433.910300][T30835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 433.921223][T30835] RIP: 0010:ieee80211_start_next_roc+0x194/0x200 [ 433.927705][T30835] Code: f1 23 f8 48 89 df 4c 89 f6 48 89 c2 5b 41 5c 41 5e 41 5f 5d e9 2d a8 0c 00 e8 98 de 34 f8 0f 0b e9 e6 fe ff ff e8 8c de 34 f8 <0f> 0b e9 25 ff ff ff 48 c7 c1 c4 2b 8a 8d 80 e1 07 80 c1 03 38 c1 [ 433.949483][T30835] RSP: 0018:ffffc90002f6f290 EFLAGS: 00010293 [ 433.956487][T30835] RAX: ffffffff89445784 RBX: ffff888023388e00 RCX: ffff88807e881dc0 [ 433.965427][T30835] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 433.974502][T30835] RBP: 0000000000000001 R08: ffff88802321529f R09: 1ffff11004642a53 [ 433.982685][T30835] R10: dffffc0000000000 R11: ffffed1004642a54 R12: dffffc0000000000 [ 433.991210][T30835] R13: 0000000000000000 R14: ffff888077d2eca0 R15: ffff88802338963d [ 433.999815][T30835] FS: 000055555e4813c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 434.008869][T30835] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 434.015581][T30835] CR2: 0000000020000200 CR3: 0000000073ebb000 CR4: 00000000003506f0 [ 434.025593][T30835] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 434.033688][T30835] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 434.041702][T30835] Call Trace: [ 434.045341][T30835] [ 434.048708][T30835] ieee80211_scan_cancel+0x142/0x5d0 [ 434.054980][T30835] ? ieee80211_do_stop+0x192/0x1d40 [ 434.060641][T30835] ieee80211_do_stop+0x19c/0x1d40 [ 434.065895][T30835] ? rcu_exp_sel_wait_wake+0x1b30/0x1b30 [ 434.071736][T30835] ? ieee80211_sdata_stop+0x80/0x80 [ 434.077802][T30835] ? ieee80211_stop_queues_by_reason+0x19c/0x220 [ 434.084634][T30835] ? __might_sleep+0xf0/0xf0 [ 434.089401][T30835] ? ieee80211_get_vif_queues+0x21d/0x390 [ 434.095177][T30835] ieee80211_if_change_type+0x435/0x9c0 [ 434.101289][T30835] ieee80211_change_iface+0x57/0x420 [ 434.106708][T30835] cfg80211_change_iface+0x770/0xeb0 [ 434.112476][T30835] nl80211_set_interface+0x5a7/0x7e0 [ 434.118545][T30835] ? nl80211_dump_interface+0x5c0/0x5c0 [ 434.124455][T30835] ? mutex_lock_nested+0x17/0x20 [ 434.129633][T30835] genl_rcv_msg+0xcea/0xf90 [ 434.134282][T30835] ? genl_bind+0x380/0x380 [ 434.138774][T30835] ? verify_lock_unused+0x140/0x140 [ 434.144423][T30835] ? verify_lock_unused+0x140/0x140 [ 434.150077][T30835] ? nl80211_dump_interface+0x5c0/0x5c0 [ 434.156375][T30835] netlink_rcv_skb+0x1f5/0x440 [ 434.161396][T30835] ? genl_bind+0x380/0x380 [ 434.165926][T30835] ? netlink_ack+0xb50/0xb50 [ 434.171631][T30835] ? __lock_acquire+0x7d10/0x7d10 [ 434.177060][T30835] ? down_read+0x1aa/0x2e0 [ 434.181998][T30835] genl_rcv+0x24/0x40 [ 434.186012][T30835] netlink_unicast+0x774/0x920 [ 434.191747][T30835] netlink_sendmsg+0x8ba/0xbe0 [ 434.196786][T30835] ? netlink_getsockopt+0x570/0x570 [ 434.202635][T30835] ? aa_sock_msg_perm+0x94/0x150 [ 434.208356][T30835] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 434.213732][T30835] ? security_socket_sendmsg+0x7c/0xa0 [ 434.219536][T30835] __sys_sendto+0x46d/0x620 [ 434.224673][T30835] ? __ia32_sys_getpeername+0x80/0x80 [ 434.230240][T30835] ? __lock_acquire+0x7d10/0x7d10 [ 434.235412][T30835] ? lock_chain_count+0x20/0x20 [ 434.240410][T30835] ? vtime_user_exit+0x2c8/0x3e0 [ 434.245453][T30835] __x64_sys_sendto+0xda/0xf0 [ 434.250546][T30835] do_syscall_64+0x4c/0xa0 [ 434.255311][T30835] ? clear_bhb_loop+0x30/0x80 [ 434.260946][T30835] ? clear_bhb_loop+0x30/0x80 [ 434.265866][T30835] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 434.272311][T30835] RIP: 0033:0x7f71cd1f9717 [ 434.276770][T30835] Code: 48 89 fa 4c 89 df e8 48 1f 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 434.297720][T30835] RSP: 002b:00007fff95b692a0 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 434.306339][T30835] RAX: ffffffffffffffda RBX: 000055555e4813c0 RCX: 00007f71cd1f9717 [ 434.314367][T30835] RDX: 0000000000000024 RSI: 00007fff95b69410 RDI: 0000000000000006 [ 434.322403][T30835] RBP: 0000000000000006 R08: 00007fff95b69304 R09: 000000000000000c [ 434.330411][T30835] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 434.338413][T30835] R13: 0000000000000000 R14: 00007fff95b69410 R15: 0000000000000000 [ 434.346394][T30835] [ 434.349597][T30835] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 434.356975][T30835] CPU: 1 PID: 30835 Comm: syz-executor165 Not tainted syzkaller #0 [ 434.364897][T30835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 434.375293][T30835] Call Trace: [ 434.378566][T30835] [ 434.381572][T30835] dump_stack_lvl+0x188/0x250 [ 434.386267][T30835] ? show_regs_print_info+0x20/0x20 [ 434.391665][T30835] ? load_image+0x400/0x400 [ 434.396183][T30835] panic+0x2e5/0x810 [ 434.400138][T30835] ? bpf_jit_dump+0xd0/0xd0 [ 434.405157][T30835] ? ieee80211_start_next_roc+0x194/0x200 [ 434.410874][T30835] __warn+0x248/0x2b0 [ 434.414849][T30835] ? ieee80211_start_next_roc+0x194/0x200 [ 434.420861][T30835] report_bug+0x1b7/0x2e0 [ 434.425282][T30835] handle_bug+0x3a/0x70 [ 434.430108][T30835] exc_invalid_op+0x16/0x40 [ 434.434707][T30835] asm_exc_invalid_op+0x16/0x20 [ 434.439662][T30835] RIP: 0010:ieee80211_start_next_roc+0x194/0x200 [ 434.446082][T30835] Code: f1 23 f8 48 89 df 4c 89 f6 48 89 c2 5b 41 5c 41 5e 41 5f 5d e9 2d a8 0c 00 e8 98 de 34 f8 0f 0b e9 e6 fe ff ff e8 8c de 34 f8 <0f> 0b e9 25 ff ff ff 48 c7 c1 c4 2b 8a 8d 80 e1 07 80 c1 03 38 c1 [ 434.466353][T30835] RSP: 0018:ffffc90002f6f290 EFLAGS: 00010293 [ 434.472506][T30835] RAX: ffffffff89445784 RBX: ffff888023388e00 RCX: ffff88807e881dc0 [ 434.480578][T30835] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 434.488652][T30835] RBP: 0000000000000001 R08: ffff88802321529f R09: 1ffff11004642a53 [ 434.496736][T30835] R10: dffffc0000000000 R11: ffffed1004642a54 R12: dffffc0000000000 [ 434.504703][T30835] R13: 0000000000000000 R14: ffff888077d2eca0 R15: ffff88802338963d [ 434.512679][T30835] ? ieee80211_start_next_roc+0x194/0x200 [ 434.518528][T30835] ieee80211_scan_cancel+0x142/0x5d0 [ 434.524054][T30835] ? ieee80211_do_stop+0x192/0x1d40 [ 434.529261][T30835] ieee80211_do_stop+0x19c/0x1d40 [ 434.534282][T30835] ? rcu_exp_sel_wait_wake+0x1b30/0x1b30 [ 434.539907][T30835] ? ieee80211_sdata_stop+0x80/0x80 [ 434.545287][T30835] ? ieee80211_stop_queues_by_reason+0x19c/0x220 [ 434.552236][T30835] ? __might_sleep+0xf0/0xf0 [ 434.556853][T30835] ? ieee80211_get_vif_queues+0x21d/0x390 [ 434.562956][T30835] ieee80211_if_change_type+0x435/0x9c0 [ 434.568922][T30835] ieee80211_change_iface+0x57/0x420 [ 434.574447][T30835] cfg80211_change_iface+0x770/0xeb0 [ 434.580130][T30835] nl80211_set_interface+0x5a7/0x7e0 [ 434.585444][T30835] ? nl80211_dump_interface+0x5c0/0x5c0 [ 434.591003][T30835] ? mutex_lock_nested+0x17/0x20 [ 434.595937][T30835] genl_rcv_msg+0xcea/0xf90 [ 434.600531][T30835] ? genl_bind+0x380/0x380 [ 434.605044][T30835] ? verify_lock_unused+0x140/0x140 [ 434.610785][T30835] ? verify_lock_unused+0x140/0x140 [ 434.616011][T30835] ? nl80211_dump_interface+0x5c0/0x5c0 [ 434.622960][T30835] netlink_rcv_skb+0x1f5/0x440 [ 434.628241][T30835] ? genl_bind+0x380/0x380 [ 434.632674][T30835] ? netlink_ack+0xb50/0xb50 [ 434.637560][T30835] ? __lock_acquire+0x7d10/0x7d10 [ 434.642593][T30835] ? down_read+0x1aa/0x2e0 [ 434.647020][T30835] genl_rcv+0x24/0x40 [ 434.651024][T30835] netlink_unicast+0x774/0x920 [ 434.655801][T30835] netlink_sendmsg+0x8ba/0xbe0 [ 434.660584][T30835] ? netlink_getsockopt+0x570/0x570 [ 434.666512][T30835] ? aa_sock_msg_perm+0x94/0x150 [ 434.671665][T30835] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 434.676954][T30835] ? security_socket_sendmsg+0x7c/0xa0 [ 434.682407][T30835] __sys_sendto+0x46d/0x620 [ 434.687034][T30835] ? __ia32_sys_getpeername+0x80/0x80 [ 434.692469][T30835] ? __lock_acquire+0x7d10/0x7d10 [ 434.697514][T30835] ? lock_chain_count+0x20/0x20 [ 434.702356][T30835] ? vtime_user_exit+0x2c8/0x3e0 [ 434.707301][T30835] __x64_sys_sendto+0xda/0xf0 [ 434.711984][T30835] do_syscall_64+0x4c/0xa0 [ 434.716483][T30835] ? clear_bhb_loop+0x30/0x80 [ 434.721593][T30835] ? clear_bhb_loop+0x30/0x80 [ 434.726278][T30835] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 434.732183][T30835] RIP: 0033:0x7f71cd1f9717 [ 434.736590][T30835] Code: 48 89 fa 4c 89 df e8 48 1f 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 434.756384][T30835] RSP: 002b:00007fff95b692a0 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 434.764820][T30835] RAX: ffffffffffffffda RBX: 000055555e4813c0 RCX: 00007f71cd1f9717 [ 434.772901][T30835] RDX: 0000000000000024 RSI: 00007fff95b69410 RDI: 0000000000000006 [ 434.780950][T30835] RBP: 0000000000000006 R08: 00007fff95b69304 R09: 000000000000000c [ 434.788906][T30835] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 434.796869][T30835] R13: 0000000000000000 R14: 00007fff95b69410 R15: 0000000000000000 [ 434.804966][T30835] [ 434.808219][T30835] Kernel Offset: disabled [ 434.812732][T30835] Rebooting in 86400 seconds..