[ 428.913818][ T1596] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.966864][ T1596] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.036685][ T1596] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.107718][ T1596] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.737056][ T1596] device hsr_slave_0 left promiscuous mode [ 429.743682][ T1596] device hsr_slave_1 left promiscuous mode [ 429.750180][ T1596] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 429.758509][ T1596] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 429.767668][ T1596] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 429.775590][ T1596] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 429.785213][ T1596] device bridge_slave_1 left promiscuous mode [ 429.791419][ T1596] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.800574][ T1596] device bridge_slave_0 left promiscuous mode [ 429.808357][ T1596] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.822107][ T1596] device veth1_macvtap left promiscuous mode [ 429.828601][ T1596] device veth0_macvtap left promiscuous mode [ 429.835016][ T1596] device veth1_vlan left promiscuous mode [ 429.840772][ T1596] device veth0_vlan left promiscuous mode [ 429.947011][ T1596] team0 (unregistering): Port device team_slave_1 removed [ 429.958457][ T1596] team0 (unregistering): Port device team_slave_0 removed [ 429.969577][ T1596] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 429.982519][ T1596] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 430.029449][ T1596] bond0 (unregistering): Released all slaves Warning: Permanently added '10.128.0.72' (ED25519) to the list of known hosts. [ 435.694303][T32034] ------------[ cut here ]------------ [ 435.699963][T32034] WARNING: CPU: 1 PID: 32034 at net/mac80211/offchannel.c:401 ieee80211_start_next_roc+0x194/0x200 [ 435.711577][T32034] Modules linked in: [ 435.715520][T32034] CPU: 1 PID: 32034 Comm: syz-executor261 Not tainted syzkaller #0 [ 435.723483][T32034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 435.733579][T32034] RIP: 0010:ieee80211_start_next_roc+0x194/0x200 [ 435.739908][T32034] Code: 85 34 f8 48 89 df 4c 89 f6 48 89 c2 5b 41 5c 41 5e 41 5f 5d e9 0d 91 0c 00 e8 b8 40 45 f8 0f 0b e9 e6 fe ff ff e8 ac 40 45 f8 <0f> 0b e9 25 ff ff ff 48 c7 c1 44 c9 69 8d 80 e1 07 80 c1 03 38 c1 [ 435.760004][T32034] RSP: 0018:ffffc9000327f290 EFLAGS: 00010293 [ 435.766734][T32034] RAX: ffffffff893289a4 RBX: ffff888022248da0 RCX: ffff888017778000 [ 435.774993][T32034] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 435.783551][T32034] RBP: 0000000000000001 R08: dffffc0000000000 R09: ffffed1004489a54 [ 435.791679][T32034] R10: ffffed1004489a54 R11: 1ffff11004489a53 R12: dffffc0000000000 [ 435.799720][T32034] R13: 0000000000000000 R14: ffff8880723fafa0 R15: ffff8880222495dd [ 435.808425][T32034] FS: 0000555594d20380(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 435.818004][T32034] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 435.825039][T32034] CR2: 0000559e071ba660 CR3: 00000000786db000 CR4: 00000000003506f0 [ 435.833599][T32034] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 435.841580][T32034] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 435.849641][T32034] Call Trace: [ 435.853152][T32034] [ 435.856154][T32034] ieee80211_scan_cancel+0x142/0x5d0 [ 435.861520][T32034] ? ieee80211_do_stop+0x12c/0x1c70 [ 435.866773][T32034] ieee80211_do_stop+0x135/0x1c70 [ 435.871894][T32034] ? rcu_exp_sel_wait_wake+0x1b00/0x1b00 [ 435.877576][T32034] ? ieee80211_sdata_stop+0x80/0x80 [ 435.882912][T32034] ? ieee80211_stop_queues_by_reason+0x19c/0x220 [ 435.889242][T32034] ? __might_sleep+0xf0/0xf0 [ 435.893864][T32034] ? init_wait_entry+0xd0/0xd0 [ 435.898632][T32034] ? ieee80211_check_concurrent_iface+0x618/0x690 [ 435.905214][T32034] ? ieee80211_get_vif_queues+0x21d/0x390 [ 435.910938][T32034] ieee80211_if_change_type+0x435/0x9c0 [ 435.916524][T32034] ieee80211_change_iface+0x57/0x420 [ 435.921818][T32034] cfg80211_change_iface+0x770/0xeb0 [ 435.927148][T32034] nl80211_set_interface+0x598/0x7d0 [ 435.932475][T32034] ? nl80211_dump_interface+0x5c0/0x5c0 [ 435.938039][T32034] ? mutex_lock_nested+0x17/0x20 [ 435.943100][T32034] genl_rcv_msg+0xbc6/0xf40 [ 435.947611][T32034] ? genl_bind+0x370/0x370 [ 435.952021][T32034] ? verify_lock_unused+0x140/0x140 [ 435.957250][T32034] ? verify_lock_unused+0x140/0x140 [ 435.962560][T32034] ? nl80211_dump_interface+0x5c0/0x5c0 [ 435.968109][T32034] netlink_rcv_skb+0x1e0/0x430 [ 435.972930][T32034] ? genl_bind+0x370/0x370 [ 435.977349][T32034] ? netlink_ack+0xb60/0xb60 [ 435.981927][T32034] ? __lock_acquire+0x7c60/0x7c60 [ 435.987053][T32034] ? preempt_count_add+0x8d/0x190 [ 435.992130][T32034] ? down_read+0x1aa/0x2e0 [ 435.996592][T32034] genl_rcv+0x24/0x40 [ 436.000590][T32034] netlink_unicast+0x774/0x920 [ 436.005498][T32034] netlink_sendmsg+0x8ab/0xbc0 [ 436.010286][T32034] ? netlink_getsockopt+0x560/0x560 [ 436.015759][T32034] ? aa_sock_msg_perm+0x94/0x150 [ 436.020788][T32034] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 436.026125][T32034] ? security_socket_sendmsg+0x7c/0xa0 [ 436.031595][T32034] __sys_sendto+0x423/0x580 [ 436.036137][T32034] ? __ia32_sys_getpeername+0x80/0x80 [ 436.041523][T32034] ? __lock_acquire+0x7c60/0x7c60 [ 436.046602][T32034] ? lock_chain_count+0x20/0x20 [ 436.051623][T32034] ? vtime_user_exit+0x2dc/0x400 [ 436.057649][T32034] __x64_sys_sendto+0xda/0xf0 [ 436.062493][T32034] do_syscall_64+0x4c/0xa0 [ 436.066915][T32034] ? clear_bhb_loop+0x30/0x80 [ 436.071582][T32034] ? clear_bhb_loop+0x30/0x80 [ 436.076471][T32034] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 436.082535][T32034] RIP: 0033:0x7f527f8dc943 [ 436.086945][T32034] Code: 64 89 02 48 c7 c0 ff ff ff ff eb b7 66 2e 0f 1f 84 00 00 00 00 00 90 80 3d a1 b7 07 00 00 41 89 ca 74 14 b8 2c 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 75 c3 0f 1f 40 00 55 48 83 ec 30 44 89 4c 24 [ 436.107086][T32034] RSP: 002b:00007ffd10e49288 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 436.115711][T32034] RAX: ffffffffffffffda RBX: 00007ffd10e49360 RCX: 00007f527f8dc943 [ 436.123851][T32034] RDX: 0000000000000024 RSI: 00007ffd10e493b0 RDI: 0000000000000006 [ 436.131868][T32034] RBP: 0000000000000006 R08: 00007ffd10e492a4 R09: 000000000000000c [ 436.139872][T32034] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 436.147873][T32034] R13: 0000000000000000 R14: 00007ffd10e493b0 R15: 0000000000000000 [ 436.155889][T32034] [ 436.158919][T32034] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 436.166272][T32034] CPU: 0 PID: 32034 Comm: syz-executor261 Not tainted syzkaller #0 [ 436.174158][T32034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 436.184197][T32034] Call Trace: [ 436.187462][T32034] [ 436.190392][T32034] dump_stack_lvl+0x168/0x230 [ 436.195061][T32034] ? show_regs_print_info+0x20/0x20 [ 436.200265][T32034] ? load_image+0x3b0/0x3b0 [ 436.204770][T32034] panic+0x2c9/0x7f0 [ 436.208663][T32034] ? bpf_jit_dump+0xd0/0xd0 [ 436.213161][T32034] ? ieee80211_start_next_roc+0x194/0x200 [ 436.218869][T32034] __warn+0x248/0x2b0 [ 436.222867][T32034] ? ieee80211_start_next_roc+0x194/0x200 [ 436.228578][T32034] report_bug+0x1b7/0x2e0 [ 436.232911][T32034] handle_bug+0x3a/0x70 [ 436.237105][T32034] exc_invalid_op+0x16/0x40 [ 436.241592][T32034] asm_exc_invalid_op+0x16/0x20 [ 436.246441][T32034] RIP: 0010:ieee80211_start_next_roc+0x194/0x200 [ 436.252781][T32034] Code: 85 34 f8 48 89 df 4c 89 f6 48 89 c2 5b 41 5c 41 5e 41 5f 5d e9 0d 91 0c 00 e8 b8 40 45 f8 0f 0b e9 e6 fe ff ff e8 ac 40 45 f8 <0f> 0b e9 25 ff ff ff 48 c7 c1 44 c9 69 8d 80 e1 07 80 c1 03 38 c1 [ 436.272577][T32034] RSP: 0018:ffffc9000327f290 EFLAGS: 00010293 [ 436.278649][T32034] RAX: ffffffff893289a4 RBX: ffff888022248da0 RCX: ffff888017778000 [ 436.286619][T32034] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 436.294666][T32034] RBP: 0000000000000001 R08: dffffc0000000000 R09: ffffed1004489a54 [ 436.302628][T32034] R10: ffffed1004489a54 R11: 1ffff11004489a53 R12: dffffc0000000000 [ 436.310580][T32034] R13: 0000000000000000 R14: ffff8880723fafa0 R15: ffff8880222495dd [ 436.318540][T32034] ? ieee80211_start_next_roc+0x194/0x200 [ 436.324253][T32034] ieee80211_scan_cancel+0x142/0x5d0 [ 436.329525][T32034] ? ieee80211_do_stop+0x12c/0x1c70 [ 436.334719][T32034] ieee80211_do_stop+0x135/0x1c70 [ 436.339768][T32034] ? rcu_exp_sel_wait_wake+0x1b00/0x1b00 [ 436.345412][T32034] ? ieee80211_sdata_stop+0x80/0x80 [ 436.350612][T32034] ? ieee80211_stop_queues_by_reason+0x19c/0x220 [ 436.357016][T32034] ? __might_sleep+0xf0/0xf0 [ 436.361606][T32034] ? init_wait_entry+0xd0/0xd0 [ 436.366471][T32034] ? ieee80211_check_concurrent_iface+0x618/0x690 [ 436.372968][T32034] ? ieee80211_get_vif_queues+0x21d/0x390 [ 436.378692][T32034] ieee80211_if_change_type+0x435/0x9c0 [ 436.384257][T32034] ieee80211_change_iface+0x57/0x420 [ 436.389556][T32034] cfg80211_change_iface+0x770/0xeb0 [ 436.394831][T32034] nl80211_set_interface+0x598/0x7d0 [ 436.400219][T32034] ? nl80211_dump_interface+0x5c0/0x5c0 [ 436.405758][T32034] ? mutex_lock_nested+0x17/0x20 [ 436.410683][T32034] genl_rcv_msg+0xbc6/0xf40 [ 436.415268][T32034] ? genl_bind+0x370/0x370 [ 436.419691][T32034] ? verify_lock_unused+0x140/0x140 [ 436.424891][T32034] ? verify_lock_unused+0x140/0x140 [ 436.430090][T32034] ? nl80211_dump_interface+0x5c0/0x5c0 [ 436.435630][T32034] netlink_rcv_skb+0x1e0/0x430 [ 436.440385][T32034] ? genl_bind+0x370/0x370 [ 436.444796][T32034] ? netlink_ack+0xb60/0xb60 [ 436.449370][T32034] ? __lock_acquire+0x7c60/0x7c60 [ 436.454381][T32034] ? preempt_count_add+0x8d/0x190 [ 436.459388][T32034] ? down_read+0x1aa/0x2e0 [ 436.463875][T32034] genl_rcv+0x24/0x40 [ 436.467845][T32034] netlink_unicast+0x774/0x920 [ 436.472599][T32034] netlink_sendmsg+0x8ab/0xbc0 [ 436.477355][T32034] ? netlink_getsockopt+0x560/0x560 [ 436.482544][T32034] ? aa_sock_msg_perm+0x94/0x150 [ 436.487564][T32034] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 436.493005][T32034] ? security_socket_sendmsg+0x7c/0xa0 [ 436.498444][T32034] __sys_sendto+0x423/0x580 [ 436.502951][T32034] ? __ia32_sys_getpeername+0x80/0x80 [ 436.508315][T32034] ? __lock_acquire+0x7c60/0x7c60 [ 436.513361][T32034] ? lock_chain_count+0x20/0x20 [ 436.518226][T32034] ? vtime_user_exit+0x2dc/0x400 [ 436.523155][T32034] __x64_sys_sendto+0xda/0xf0 [ 436.527833][T32034] do_syscall_64+0x4c/0xa0 [ 436.532232][T32034] ? clear_bhb_loop+0x30/0x80 [ 436.536891][T32034] ? clear_bhb_loop+0x30/0x80 [ 436.541551][T32034] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 436.547427][T32034] RIP: 0033:0x7f527f8dc943 [ 436.551828][T32034] Code: 64 89 02 48 c7 c0 ff ff ff ff eb b7 66 2e 0f 1f 84 00 00 00 00 00 90 80 3d a1 b7 07 00 00 41 89 ca 74 14 b8 2c 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 75 c3 0f 1f 40 00 55 48 83 ec 30 44 89 4c 24 [ 436.571414][T32034] RSP: 002b:00007ffd10e49288 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 436.579946][T32034] RAX: ffffffffffffffda RBX: 00007ffd10e49360 RCX: 00007f527f8dc943 [ 436.587912][T32034] RDX: 0000000000000024 RSI: 00007ffd10e493b0 RDI: 0000000000000006 [ 436.595887][T32034] RBP: 0000000000000006 R08: 00007ffd10e492a4 R09: 000000000000000c [ 436.603932][T32034] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 436.611889][T32034] R13: 0000000000000000 R14: 00007ffd10e493b0 R15: 0000000000000000 [ 436.619861][T32034] [ 436.623115][T32034] Kernel Offset: disabled [ 436.627559][T32034] Rebooting in 86400 seconds..