[ 486.860896][ T6970] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 486.978689][ T6970] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 487.024857][ T6970] bond0 (unregistering): Released all slaves [ 487.365240][ T6970] hsr_slave_0: left promiscuous mode [ 487.378592][ T6970] hsr_slave_1: left promiscuous mode [ 487.391402][ T6970] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 487.414626][ T6970] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 487.441171][ T6970] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 487.475757][ T6970] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 487.534858][ T6970] veth1_macvtap: left promiscuous mode [ 487.576670][ T6970] veth0_macvtap: left promiscuous mode [ 487.582384][ T6970] veth1_vlan: left promiscuous mode [ 487.588796][ T6970] veth0_vlan: left promiscuous mode [ 490.101156][ T6970] team0 (unregistering): Port device team_slave_1 removed [ 490.331077][ T6970] team0 (unregistering): Port device team_slave_0 removed Warning: Permanently added '10.128.1.191' (ED25519) to the list of known hosts. [ 491.400640][ T6970] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.528519][ T6970] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.631903][ T6970] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.658584][T25280] ------------[ cut here ]------------ [ 491.664194][T25280] roc->started [ 491.664212][T25280] WARNING: net/mac80211/offchannel.c:404 at ieee80211_start_next_roc+0x256/0x2d0, CPU#0: syz-executor136/25280 [ 491.679618][T25280] Modules linked in: [ 491.683658][T25280] CPU: 0 UID: 0 PID: 25280 Comm: syz-executor136 Not tainted syzkaller #0 PREEMPT(full) [ 491.694001][T25280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 491.704730][T25280] RIP: 0010:ieee80211_start_next_roc+0x256/0x2d0 [ 491.711630][T25280] Code: db ff e8 ed 4e 1e f7 48 83 c4 10 5b 5d e9 ad b5 27 f6 e8 dd 4e 1e f7 48 89 df e8 15 62 ff ff e9 36 ff ff ff e8 cb 4e 1e f7 90 <0f> 0b 90 e9 28 ff ff ff 48 c7 c7 54 a4 b7 90 e8 a6 a7 87 f7 e9 d1 [ 491.731668][T25280] RSP: 0018:ffffc900043ef2b0 EFLAGS: 00010293 [ 491.738117][T25280] RAX: 0000000000000000 RBX: ffff8880287d0e80 RCX: ffffffff8ae88a36 [ 491.746486][T25280] RDX: ffff888034c78000 RSI: ffffffff8ae88b75 RDI: ffff888034c78000 [ 491.754493][T25280] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 491.763000][T25280] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 491.771354][T25280] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff8880287d2910 [ 491.779803][T25280] FS: 0000555572b553c0(0000) GS:ffff8881245dc000(0000) knlGS:0000000000000000 [ 491.788983][T25280] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 491.795640][T25280] CR2: 00007f03d0c79440 CR3: 000000005f9f0000 CR4: 0000000000350ef0 [ 491.803641][T25280] Call Trace: [ 491.806992][T25280] [ 491.809929][T25280] ? __pfx_mac80211_hwsim_sw_scan_complete+0x10/0x10 [ 491.816724][T25280] __ieee80211_scan_completed+0x4fd/0xe00 [ 491.822492][T25280] ieee80211_scan_cancel+0x1cf/0x930 [ 491.827885][T25280] ieee80211_do_stop+0x1c61/0x2600 [ 491.833036][T25280] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 491.839080][T25280] ? do_raw_spin_lock+0x128/0x260 [ 491.844138][T25280] ? srso_alias_return_thunk+0x5/0xfbef5 [ 491.849875][T25280] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 491.855427][T25280] ? srso_alias_return_thunk+0x5/0xfbef5 [ 491.861105][T25280] ? lockdep_hardirqs_on+0x78/0x100 [ 491.866392][T25280] ? srso_alias_return_thunk+0x5/0xfbef5 [ 491.872058][T25280] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 491.877980][T25280] ? ieee80211_check_concurrent_iface+0x598/0x9e0 [ 491.884435][T25280] ? srso_alias_return_thunk+0x5/0xfbef5 [ 491.890185][T25280] ? srso_alias_return_thunk+0x5/0xfbef5 [ 491.895973][T25280] ieee80211_if_change_type+0x3c6/0x790 [ 491.901576][T25280] ieee80211_change_iface+0xad/0x970 [ 491.907063][T25280] ? srso_alias_return_thunk+0x5/0xfbef5 [ 491.912735][T25280] ? cfg80211_mlme_purge_registrations+0x1eb/0x2b0 [ 491.919412][T25280] cfg80211_change_iface+0x538/0xca0 [ 491.924758][T25280] nl80211_set_interface+0x875/0xc80 [ 491.930186][T25280] ? __pfx_nl80211_set_interface+0x10/0x10 [ 491.936170][T25280] ? srso_alias_return_thunk+0x5/0xfbef5 [ 491.941850][T25280] ? nl80211_pre_doit+0x30e/0xae0 [ 491.946957][T25280] ? srso_alias_return_thunk+0x5/0xfbef5 [ 491.952624][T25280] ? nl80211_pre_doit+0x19a/0xae0 [ 491.957779][T25280] genl_family_rcv_msg_doit+0x214/0x300 [ 491.963365][T25280] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 491.969510][T25280] ? srso_alias_return_thunk+0x5/0xfbef5 [ 491.975225][T25280] ? genl_get_cmd+0x3ef/0x720 [ 491.979937][T25280] ? srso_alias_return_thunk+0x5/0xfbef5 [ 491.985666][T25280] ? security_capable+0x80/0x260 [ 491.990985][T25280] ? srso_alias_return_thunk+0x5/0xfbef5 [ 491.996718][T25280] ? ns_capable+0xd2/0xf0 [ 492.001088][T25280] genl_rcv_msg+0x560/0x800 [ 492.005666][T25280] ? __pfx_genl_rcv_msg+0x10/0x10 [ 492.010733][T25280] ? srso_alias_return_thunk+0x5/0xfbef5 [ 492.016790][T25280] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 492.022210][T25280] ? __pfx_nl80211_set_interface+0x10/0x10 [ 492.028228][T25280] ? __pfx_nl80211_post_doit+0x10/0x10 [ 492.033729][T25280] ? srso_alias_return_thunk+0x5/0xfbef5 [ 492.039456][T25280] ? __lock_acquire+0x4a5/0x2630 [ 492.044545][T25280] netlink_rcv_skb+0x159/0x420 [ 492.049433][T25280] ? __pfx_genl_rcv_msg+0x10/0x10 [ 492.054498][T25280] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 492.059902][T25280] ? srso_alias_return_thunk+0x5/0xfbef5 [ 492.065628][T25280] ? netlink_deliver_tap+0x1ae/0xcc0 [ 492.070978][T25280] genl_rcv+0x28/0x40 [ 492.074995][T25280] netlink_unicast+0x5aa/0x870 [ 492.079841][T25280] ? __pfx_netlink_unicast+0x10/0x10 [ 492.085199][T25280] ? __pfx___might_resched+0x10/0x10 [ 492.090553][T25280] netlink_sendmsg+0x8b0/0xda0 [ 492.095579][T25280] ? __pfx_netlink_sendmsg+0x10/0x10 [ 492.100888][T25280] ? srso_alias_return_thunk+0x5/0xfbef5 [ 492.106716][T25280] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 492.112397][T25280] __sys_sendto+0x4aa/0x520 [ 492.117003][T25280] ? __pfx___sys_sendto+0x10/0x10 [ 492.122089][T25280] ? __fput+0x68a/0xb40 [ 492.126332][T25280] ? __pfx_fput_close_sync+0x10/0x10 [ 492.131660][T25280] __x64_sys_sendto+0xe0/0x1c0 [ 492.136554][T25280] ? do_syscall_64+0x94/0xf80 [ 492.141357][T25280] ? srso_alias_return_thunk+0x5/0xfbef5 [ 492.147057][T25280] ? lockdep_hardirqs_on+0x78/0x100 [ 492.152294][T25280] do_syscall_64+0xc9/0xf80 [ 492.156884][T25280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.162810][T25280] RIP: 0033:0x7f03d0bea897 [ 492.167286][T25280] Code: 48 89 fa 4c 89 df e8 48 1f 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 492.187001][T25280] RSP: 002b:00007ffc51f003b0 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 492.195534][T25280] RAX: ffffffffffffffda RBX: 0000555572b553c0 RCX: 00007f03d0bea897 [ 492.203530][T25280] RDX: 0000000000000024 RSI: 00007ffc51f00520 RDI: 0000000000000006 [ 492.211625][T25280] RBP: 0000000000000006 R08: 00007ffc51f00414 R09: 000000000000000c [ 492.219658][T25280] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 492.227727][T25280] R13: 0000000000000000 R14: 00007ffc51f00520 R15: 0000000000000000 [ 492.235787][T25280] [ 492.238827][T25280] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 492.246292][T25280] CPU: 0 UID: 0 PID: 25280 Comm: syz-executor136 Not tainted syzkaller #0 PREEMPT(full) [ 492.256109][T25280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 492.266164][T25280] Call Trace: [ 492.269440][T25280] [ 492.272366][T25280] dump_stack_lvl+0x100/0x190 [ 492.277063][T25280] vpanic+0x20d/0x630 [ 492.281056][T25280] panic+0xd1/0xd1 [ 492.284784][T25280] ? __pfx_panic+0x10/0x10 [ 492.289225][T25280] ? check_panic_on_warn+0x1f/0x90 [ 492.294370][T25280] check_panic_on_warn.cold+0x19/0x34 [ 492.299754][T25280] ? ieee80211_start_next_roc+0x256/0x2d0 [ 492.305496][T25280] __warn.cold+0x191/0x2f8 [ 492.309932][T25280] __report_bug+0x296/0x3d0 [ 492.314446][T25280] ? ieee80211_start_next_roc+0x256/0x2d0 [ 492.320191][T25280] ? __pfx___report_bug+0x10/0x10 [ 492.325411][T25280] ? srso_alias_return_thunk+0x5/0xfbef5 [ 492.331067][T25280] ? srso_alias_return_thunk+0x5/0xfbef5 [ 492.336717][T25280] ? __lock_acquire+0x4a5/0x2630 [ 492.341731][T25280] ? ieee80211_start_next_roc+0x256/0x2d0 [ 492.347472][T25280] report_bug+0xb2/0x220 [ 492.351734][T25280] ? ieee80211_start_next_roc+0x256/0x2d0 [ 492.357473][T25280] handle_bug+0x166/0x2a0 [ 492.361831][T25280] exc_invalid_op+0x17/0x50 [ 492.366363][T25280] asm_exc_invalid_op+0x1a/0x20 [ 492.371222][T25280] RIP: 0010:ieee80211_start_next_roc+0x256/0x2d0 [ 492.377656][T25280] Code: db ff e8 ed 4e 1e f7 48 83 c4 10 5b 5d e9 ad b5 27 f6 e8 dd 4e 1e f7 48 89 df e8 15 62 ff ff e9 36 ff ff ff e8 cb 4e 1e f7 90 <0f> 0b 90 e9 28 ff ff ff 48 c7 c7 54 a4 b7 90 e8 a6 a7 87 f7 e9 d1 [ 492.397277][T25280] RSP: 0018:ffffc900043ef2b0 EFLAGS: 00010293 [ 492.403369][T25280] RAX: 0000000000000000 RBX: ffff8880287d0e80 RCX: ffffffff8ae88a36 [ 492.411342][T25280] RDX: ffff888034c78000 RSI: ffffffff8ae88b75 RDI: ffff888034c78000 [ 492.419318][T25280] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 492.427294][T25280] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 492.435270][T25280] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff8880287d2910 [ 492.443264][T25280] ? ieee80211_start_next_roc+0x116/0x2d0 [ 492.449009][T25280] ? ieee80211_start_next_roc+0x255/0x2d0 [ 492.454761][T25280] ? __pfx_mac80211_hwsim_sw_scan_complete+0x10/0x10 [ 492.461475][T25280] __ieee80211_scan_completed+0x4fd/0xe00 [ 492.467226][T25280] ieee80211_scan_cancel+0x1cf/0x930 [ 492.472535][T25280] ieee80211_do_stop+0x1c61/0x2600 [ 492.477668][T25280] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 492.483598][T25280] ? do_raw_spin_lock+0x128/0x260 [ 492.488642][T25280] ? srso_alias_return_thunk+0x5/0xfbef5 [ 492.494299][T25280] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 492.499782][T25280] ? srso_alias_return_thunk+0x5/0xfbef5 [ 492.505440][T25280] ? lockdep_hardirqs_on+0x78/0x100 [ 492.510662][T25280] ? srso_alias_return_thunk+0x5/0xfbef5 [ 492.516312][T25280] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 492.522144][T25280] ? ieee80211_check_concurrent_iface+0x598/0x9e0 [ 492.528588][T25280] ? srso_alias_return_thunk+0x5/0xfbef5 [ 492.534330][T25280] ? srso_alias_return_thunk+0x5/0xfbef5 [ 492.539986][T25280] ieee80211_if_change_type+0x3c6/0x790 [ 492.545568][T25280] ieee80211_change_iface+0xad/0x970 [ 492.550874][T25280] ? srso_alias_return_thunk+0x5/0xfbef5 [ 492.556521][T25280] ? cfg80211_mlme_purge_registrations+0x1eb/0x2b0 [ 492.563047][T25280] cfg80211_change_iface+0x538/0xca0 [ 492.568367][T25280] nl80211_set_interface+0x875/0xc80 [ 492.573689][T25280] ? __pfx_nl80211_set_interface+0x10/0x10 [ 492.579530][T25280] ? srso_alias_return_thunk+0x5/0xfbef5 [ 492.585187][T25280] ? nl80211_pre_doit+0x30e/0xae0 [ 492.590238][T25280] ? srso_alias_return_thunk+0x5/0xfbef5 [ 492.595888][T25280] ? nl80211_pre_doit+0x19a/0xae0 [ 492.600937][T25280] genl_family_rcv_msg_doit+0x214/0x300 [ 492.606508][T25280] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 492.612589][T25280] ? srso_alias_return_thunk+0x5/0xfbef5 [ 492.618243][T25280] ? genl_get_cmd+0x3ef/0x720 [ 492.622943][T25280] ? srso_alias_return_thunk+0x5/0xfbef5 [ 492.628591][T25280] ? security_capable+0x80/0x260 [ 492.633548][T25280] ? srso_alias_return_thunk+0x5/0xfbef5 [ 492.639194][T25280] ? ns_capable+0xd2/0xf0 [ 492.643549][T25280] genl_rcv_msg+0x560/0x800 [ 492.648072][T25280] ? __pfx_genl_rcv_msg+0x10/0x10 [ 492.653111][T25280] ? srso_alias_return_thunk+0x5/0xfbef5 [ 492.658758][T25280] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 492.664236][T25280] ? __pfx_nl80211_set_interface+0x10/0x10 [ 492.670155][T25280] ? __pfx_nl80211_post_doit+0x10/0x10 [ 492.675638][T25280] ? srso_alias_return_thunk+0x5/0xfbef5 [ 492.681286][T25280] ? __lock_acquire+0x4a5/0x2630 [ 492.686260][T25280] netlink_rcv_skb+0x159/0x420 [ 492.691036][T25280] ? __pfx_genl_rcv_msg+0x10/0x10 [ 492.696080][T25280] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 492.701481][T25280] ? srso_alias_return_thunk+0x5/0xfbef5 [ 492.707134][T25280] ? netlink_deliver_tap+0x1ae/0xcc0 [ 492.712456][T25280] genl_rcv+0x28/0x40 [ 492.716537][T25280] netlink_unicast+0x5aa/0x870 [ 492.721933][T25280] ? __pfx_netlink_unicast+0x10/0x10 [ 492.727233][T25280] ? __pfx___might_resched+0x10/0x10 [ 492.732553][T25280] netlink_sendmsg+0x8b0/0xda0 [ 492.737370][T25280] ? __pfx_netlink_sendmsg+0x10/0x10 [ 492.742671][T25280] ? srso_alias_return_thunk+0x5/0xfbef5 [ 492.748324][T25280] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 492.753985][T25280] __sys_sendto+0x4aa/0x520 [ 492.758521][T25280] ? __pfx___sys_sendto+0x10/0x10 [ 492.763596][T25280] ? __fput+0x68a/0xb40 [ 492.767780][T25280] ? __pfx_fput_close_sync+0x10/0x10 [ 492.773091][T25280] __x64_sys_sendto+0xe0/0x1c0 [ 492.777880][T25280] ? do_syscall_64+0x94/0xf80 [ 492.782574][T25280] ? srso_alias_return_thunk+0x5/0xfbef5 [ 492.788223][T25280] ? lockdep_hardirqs_on+0x78/0x100 [ 492.793441][T25280] do_syscall_64+0xc9/0xf80 [ 492.797971][T25280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.803877][T25280] RIP: 0033:0x7f03d0bea897 [ 492.808299][T25280] Code: 48 89 fa 4c 89 df e8 48 1f 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 492.827925][T25280] RSP: 002b:00007ffc51f003b0 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 492.836374][T25280] RAX: ffffffffffffffda RBX: 0000555572b553c0 RCX: 00007f03d0bea897 [ 492.844388][T25280] RDX: 0000000000000024 RSI: 00007ffc51f00520 RDI: 0000000000000006 [ 492.852370][T25280] RBP: 0000000000000006 R08: 00007ffc51f00414 R09: 000000000000000c [ 492.860351][T25280] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 492.868330][T25280] R13: 0000000000000000 R14: 00007ffc51f00520 R15: 0000000000000000 [ 492.876343][T25280] [ 492.879711][T25280] Kernel Offset: disabled [ 492.884054][T25280] Rebooting in 86400 seconds..