[ 396.639689][ T4605] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.679422][ T4605] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.732635][ T4605] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.790175][ T4605] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.918997][ T4605] device hsr_slave_0 left promiscuous mode [ 397.958782][ T4605] device hsr_slave_1 left promiscuous mode [ 398.045520][ T4605] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 398.046730][ T4605] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 398.049625][ T4605] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 398.050770][ T4605] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 398.052055][ T4605] device bridge_slave_1 left promiscuous mode [ 398.052976][ T4605] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.096011][ T4605] device bridge_slave_0 left promiscuous mode [ 398.097016][ T4605] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.225595][ T4605] device veth1_macvtap left promiscuous mode [ 398.226480][ T4605] device veth0_macvtap left promiscuous mode [ 398.227290][ T4605] device veth1_vlan left promiscuous mode [ 398.228297][ T4605] device veth0_vlan left promiscuous mode [ 398.319317][ T4605] team0 (unregistering): Port device team_slave_1 removed [ 398.323695][ T4605] team0 (unregistering): Port device team_slave_0 removed [ 398.327863][ T4605] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 398.359959][ T4605] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 398.479196][ T4605] bond0 (unregistering): Released all slaves Warning: Permanently added '10.128.1.113' (ED25519) to the list of known hosts. [ 398.921273][T22086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.922608][T22086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.924359][T22086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.926129][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 398.936995][T22086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.939483][T22086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.940470][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 398.940865][T22086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.943422][T22086] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 398.955362][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.956651][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.958146][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 398.965404][ T4585] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.967198][ T4585] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.969062][ T4611] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 398.969443][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.971237][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.972424][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 398.987463][ T4585] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.988787][ T4585] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.990947][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 399.042068][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.043385][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.044692][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 399.088250][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.090370][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.130646][T22086] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 399.278319][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.279864][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.408143][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 401.697058][ T4605] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.841393][ T4605] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.888403][ T4605] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.081163][ T4605] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.467795][ T4605] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.556963][ T4605] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.681777][ T4605] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.872029][ T4605] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.522505][ T4605] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.712874][ T4605] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.824904][ T4605] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.941721][ T4605] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.136248][ T6337] ------------[ cut here ]------------ [ 404.137308][ T6337] WARNING: CPU: 0 PID: 6337 at net/mac80211/offchannel.c:401 ieee80211_start_next_roc+0x188/0x1f0 [ 404.138823][ T6337] Modules linked in: [ 404.139357][ T6337] CPU: 0 PID: 6337 Comm: syz-executor296 Not tainted syzkaller #0 [ 404.140433][ T6337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 404.141821][ T6337] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 404.142918][ T6337] pc : ieee80211_start_next_roc+0x188/0x1f0 [ 404.143748][ T6337] lr : ieee80211_start_next_roc+0x188/0x1f0 [ 404.144595][ T6337] sp : ffff80001fdb7010 [ 404.145206][ T6337] x29: ffff80001fdb7010 x28: 1fffe0001ac6154e x27: 0000000000000001 [ 404.146437][ T6337] x26: dfff800000000000 x25: ffff0000d7f45800 x24: ffff0000d630ac10 [ 404.147604][ T6337] x23: ffff80001438d110 x22: ffff0000d630a8a0 x21: dfff800000000000 [ 404.148731][ T6337] x20: ffff0000c79eb620 x19: ffff0000d6308e20 x18: 0000000000000000 [ 404.149866][ T6337] x17: 0000000000000000 x16: ffff8000082c4ec4 x15: 000000000000000a [ 404.151039][ T6337] x14: 0000000000000001 x13: 1ffff00003fb6de0 x12: 0000000000000000 [ 404.152246][ T6337] x11: ff80800010c58a28 x10: 0000000000000000 x9 : ffff800010c58a28 [ 404.153367][ T6337] x8 : ffff0000c7753680 x7 : ffff800010c764d4 x6 : 0000000000000000 [ 404.154504][ T6337] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000114163d4 [ 404.155573][ T6337] x2 : 0000000000000000 x1 : 0000000000000001 x0 : 0000000000000000 [ 404.156735][ T6337] Call trace: [ 404.157208][ T6337] ieee80211_start_next_roc+0x188/0x1f0 [ 404.157975][ T6337] __ieee80211_scan_completed+0x780/0xbec [ 404.158777][ T6337] ieee80211_scan_cancel+0xec/0x864 [ 404.159533][ T6337] ieee80211_do_stop+0x170/0x190c [ 404.160226][ T6337] ieee80211_if_change_type+0x3fc/0xc0c [ 404.161040][ T6337] ieee80211_change_iface+0x64/0x384 [ 404.161805][ T6337] cfg80211_change_iface+0x75c/0x12c4 [ 404.162575][ T6337] nl80211_set_interface+0x490/0x6ac [ 404.163260][ T6337] genl_rcv_msg+0x974/0xc64 [ 404.163930][ T6337] netlink_rcv_skb+0x218/0x3dc [ 404.164646][ T6337] genl_rcv+0x38/0x50 [ 404.165211][ T6337] netlink_unicast+0x614/0x884 [ 404.165894][ T6337] netlink_sendmsg+0x6ec/0x9e4 [ 404.166578][ T6337] __sys_sendto+0x30c/0x420 [ 404.167207][ T6337] __arm64_sys_sendto+0xe4/0x104 [ 404.167856][ T6337] invoke_syscall+0x98/0x28c [ 404.168502][ T6337] el0_svc_common+0x13c/0x258 [ 404.169154][ T6337] do_el0_svc+0x5c/0x140 [ 404.169786][ T6337] el0_svc+0x78/0x1d0 [ 404.170348][ T6337] el0t_64_sync_handler+0xcc/0xe4 [ 404.171021][ T6337] el0t_64_sync+0x1a0/0x1a4 [ 404.171670][ T6337] irq event stamp: 2524 [ 404.172280][ T6337] hardirqs last enabled at (2523): [] _raw_spin_unlock_irqrestore+0xa8/0x14c [ 404.173770][ T6337] hardirqs last disabled at (2524): [] el1_dbg+0x24/0x80 [ 404.175140][ T6337] softirqs last enabled at (2520): [] ieee80211_configure_filter+0x4f4/0xf24 [ 404.176693][ T6337] softirqs last disabled at (2518): [] ieee80211_configure_filter+0x32c/0xf24 [ 404.178246][ T6337] ---[ end trace 91efc50731afe7a1 ]--- [ 404.793141][ T4605] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.952296][ T4605] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.091784][ T4605] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.322514][ T4605] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.112494][ T4605] device hsr_slave_0 left promiscuous mode [ 410.155801][ T4605] device hsr_slave_1 left promiscuous mode [ 410.245562][ T4605] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 410.246843][ T4605] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 410.250521][ T4605] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 410.251608][ T4605] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 410.252821][ T4605] device bridge_slave_1 left promiscuous mode [ 410.253780][ T4605] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.288800][ T4605] device bridge_slave_0 left promiscuous mode [ 410.289847][ T4605] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.338695][ T4605] device hsr_slave_0 left promiscuous mode [ 410.375856][ T4605] device hsr_slave_1 left promiscuous mode [ 410.465506][ T4605] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 410.466684][ T4605] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 410.468011][ T4605] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 410.469027][ T4605] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 410.470368][ T4605] device bridge_slave_1 left promiscuous mode [ 410.471298][ T4605] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.505999][ T4605] device bridge_slave_0 left promiscuous mode [ 410.507133][ T4605] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.557866][ T4605] device hsr_slave_0 left promiscuous mode [ 410.595640][ T4605] device hsr_slave_1 left promiscuous mode [ 410.685555][ T4605] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 410.686838][ T4605] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 410.688280][ T4605] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 410.689352][ T4605] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 410.691230][ T4605] device bridge_slave_1 left promiscuous mode [ 410.692220][ T4605] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.726287][ T4605] device bridge_slave_0 left promiscuous mode [ 410.727520][ T4605] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.778456][ T4605] device hsr_slave_0 left promiscuous mode [ 410.816199][ T4605] device hsr_slave_1 left promiscuous mode [ 410.905513][ T4605] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 410.906879][ T4605] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 410.908395][ T4605] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 410.909479][ T4605] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 410.910762][ T4605] device bridge_slave_1 left promiscuous mode [ 410.911671][ T4605] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.946981][ T4605] device bridge_slave_0 left promiscuous mode [ 410.947979][ T4605] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.075591][ T4605] device veth1_macvtap left promiscuous mode [ 411.076686][ T4605] device veth0_macvtap left promiscuous mode [ 411.077634][ T4605] device veth1_vlan left promiscuous mode [ 411.078545][ T4605] device veth0_vlan left promiscuous mode [ 411.165594][ T4605] device veth1_macvtap left promiscuous mode [ 411.166597][ T4605] device veth0_macvtap left promiscuous mode [ 411.167524][ T4605] device veth1_vlan left promiscuous mode [ 411.168459][ T4605] device veth0_vlan left promiscuous mode [ 411.255646][ T4605] device veth1_macvtap left promiscuous mode [ 411.256860][ T4605] device veth0_macvtap left promiscuous mode [ 411.257799][ T4605] device veth1_vlan left promiscuous mode [ 411.258785][ T4605] device veth0_vlan left promiscuous mode [ 411.345616][ T4605] device veth1_macvtap left promiscuous mode [ 411.346648][ T4605] device veth0_macvtap left promiscuous mode [ 411.347619][ T4605] device veth1_vlan left promiscuous mode [ 411.348576][ T4605] device veth0_vlan left promiscuous mode [ 411.610037][ T4605] team0 (unregistering): Port device team_slave_1 removed [ 411.615002][ T4605] team0 (unregistering): Port device team_slave_0 removed [ 411.619853][ T4605] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 411.671881][ T4605] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 411.770267][ T4605] bond0 (unregistering): Released all slaves [ 411.895049][ T4605] team0 (unregistering): Port device team_slave_1 removed [ 411.900148][ T4605] team0 (unregistering): Port device team_slave_0 removed [ 411.904183][ T4605] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 411.941532][ T4605] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 412.050763][ T4605] bond0 (unregistering): Released all slaves [ 412.168541][ T4605] team0 (unregistering): Port device team_slave_1 removed [ 412.173192][ T4605] team0 (unregistering): Port device team_slave_0 removed [ 412.177602][ T4605] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 412.230273][ T4605] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 412.339901][ T4605] bond0 (unregistering): Released all slaves [ 412.469201][ T4605] team0 (unregistering): Port device team_slave_1 removed [ 412.473621][ T4605] team0 (unregistering): Port device team_slave_0 removed [ 412.481547][ T4605] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 412.529994][ T4605] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 412.639370][ T4605] bond0 (unregistering): Released all slaves