[ 443.407119][ T30] audit: type=1804 audit(1773299892.295:398): pid=10607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir4084952107/syzkaller.s0rbH1/396/cgroup.controllers" dev="sda1" ino=2035 res=1 errno=0
[ 444.294697][ T30] audit: type=1804 audit(1773299893.185:399): pid=10618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir4084952107/syzkaller.s0rbH1/397/cgroup.controllers" dev="sda1" ino=2035 res=1 errno=0
[ 445.228177][ T30] audit: type=1804 audit(1773299894.115:400): pid=10629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir4084952107/syzkaller.s0rbH1/398/cgroup.controllers" dev="sda1" ino=2035 res=1 errno=0
[ 446.065390][ T30] audit: type=1804 audit(1773299894.955:401): pid=10641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir4084952107/syzkaller.s0rbH1/399/cgroup.controllers" dev="sda1" ino=2035 res=1 errno=0
[ 446.983701][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 447.049985][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 447.117854][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 447.190981][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 447.330757][ T12] bridge_slave_1: left allmulticast mode
[ 447.336573][ T12] bridge_slave_1: left promiscuous mode
[ 447.348822][ T12] bridge0: port 2(bridge_slave_1) entered disabled state
[ 447.357755][ T12] bridge_slave_0: left allmulticast mode
[ 447.366933][ T12] bridge_slave_0: left promiscuous mode
[ 447.372803][ T12] bridge0: port 1(bridge_slave_0) entered disabled state
[ 447.509014][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 447.520555][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 447.530701][ T12] bond0 (unregistering): Released all slaves
[ 447.665606][ T12] hsr_slave_0: left promiscuous mode
[ 447.671972][ T12] hsr_slave_1: left promiscuous mode
[ 447.678132][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 447.686015][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 447.698386][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 447.708514][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 447.720953][ T12] veth1_macvtap: left promiscuous mode
[ 447.726555][ T12] veth0_macvtap: left promiscuous mode
[ 447.732457][ T12] veth1_vlan: left promiscuous mode
[ 447.737756][ T12] veth0_vlan: left promiscuous mode
[ 447.987955][ T12] team0 (unregistering): Port device team_slave_1 removed
[ 448.007038][ T12] team0 (unregistering): Port device team_slave_0 removed
Warning: Permanently added '10.128.0.97' (ED25519) to the list of known hosts.
[ 448.628604][ T30] audit: type=1804 audit(1773299897.515:402): pid=10688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor243" name="/root/cgroup.controllers" dev="sda1" ino=2032 res=1 errno=0
[ 449.057994][ T30] audit: type=1804 audit(1773299897.945:403): pid=10702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor243" name="/root/cgroup.controllers" dev="sda1" ino=2032 res=1 errno=0
[ 449.699672][ T30] audit: type=1804 audit(1773299898.585:404): pid=10722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor243" name="/root/cgroup.controllers" dev="sda1" ino=2032 res=1 errno=0
[ 449.890364][ T30] audit: type=1804 audit(1773299898.785:405): pid=10732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor243" name="/root/cgroup.controllers" dev="sda1" ino=2032 res=1 errno=0
[ 450.084706][ T30] audit: type=1804 audit(1773299898.975:406): pid=10735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor243" name="/root/cgroup.controllers" dev="sda1" ino=2032 res=1 errno=0
[ 450.513906][ T30] audit: type=1804 audit(1773299899.405:407): pid=10739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor243" name="/root/cgroup.controllers" dev="sda1" ino=2032 res=1 errno=0
[ 450.910338][ T30] audit: type=1804 audit(1773299899.805:408): pid=10742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor243" name="/root/cgroup.controllers" dev="sda1" ino=2032 res=1 errno=0
[ 451.318927][ T30] audit: type=1804 audit(1773299900.205:409): pid=10745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor243" name="/root/cgroup.controllers" dev="sda1" ino=2032 res=1 errno=0
[ 451.754837][ T30] audit: type=1804 audit(1773299900.645:410): pid=10749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor243" name="/root/cgroup.controllers" dev="sda1" ino=2032 res=1 errno=0
[ 451.824202][T10751] ------------[ cut here ]------------
[ 451.830180][T10751] roc->started
[ 451.830201][T10751] WARNING: net/mac80211/offchannel.c:404 at ieee80211_start_next_roc+0x1d8/0x240, CPU#1: syz-executor243/10751
[ 451.845568][T10751] Modules linked in:
[ 451.849677][T10751] CPU: 1 UID: 0 PID: 10751 Comm: syz-executor243 Not tainted syzkaller #0 PREEMPT(full)
[ 451.859622][T10751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[ 451.870222][T10751] RIP: 0010:ieee80211_start_next_roc+0x1d8/0x240
[ 451.876637][T10751] Code: 4c 89 f7 48 89 de 48 89 c2 5b 41 5c 41 5e 41 5f 5d e9 6c 3c db ff e8 47 a3 aa f6 90 0f 0b 90 e9 c1 fe ff ff e8 39 a3 aa f6 90 <0f> 0b 90 e9 fe fe ff ff 48 c7 c1 c0 be 11 90 80 e1 07 80 c1 03 38
[ 451.896498][T10751] RSP: 0018:ffffc900038371f0 EFLAGS: 00010293
[ 451.902829][T10751] RAX: ffffffff8b1afa77 RBX: ffff888029050e80 RCX: ffff888036e0bd00
[ 451.910874][T10751] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[ 451.918838][T10751] RBP: 0000000000000001 R08: ffff888144a89807 R09: 1ffff11028951300
[ 451.926942][T10751] R10: dffffc0000000000 R11: ffffed1028951301 R12: dffffc0000000000
[ 451.935021][T10751] R13: dffffc0000000000 R14: ffff88803546e520 R15: ffff888029051626
[ 451.943154][T10751] FS: 00007f235b6646c0(0000) GS:ffff888125563000(0000) knlGS:0000000000000000
[ 451.952194][T10751] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 451.958798][T10751] CR2: 00007f235b662ff8 CR3: 0000000025ba4000 CR4: 00000000003526f0
[ 451.966927][T10751] Call Trace:
[ 451.970445][T10751]
[ 451.973394][T10751] ieee80211_do_stop+0x233/0x2010
[ 451.978474][T10751] ? ieee80211_fill_ifcomb_params+0xd26/0xd50
[ 451.984853][T10751] ? do_raw_spin_lock+0x12b/0x2f0
[ 451.989996][T10751] ? __pfx_ieee80211_do_stop+0x10/0x10
[ 451.995563][T10751] ? ieee80211_stop_queues_by_reason+0x149/0x1a0
[ 452.002204][T10751] ieee80211_if_change_type+0x430/0x940
[ 452.007885][T10751] ieee80211_change_iface+0xd5/0x510
[ 452.013374][T10751] cfg80211_change_iface+0x6bf/0xed0
[ 452.018773][T10751] nl80211_set_interface+0x773/0xa90
[ 452.024307][T10751] ? __pfx_nl80211_set_interface+0x10/0x10
[ 452.030176][T10751] ? nl80211_pre_doit+0x4fb/0x930
[ 452.035217][T10751] genl_family_rcv_msg_doit+0x22a/0x330
[ 452.040915][T10751] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 452.047003][T10751] ? bpf_lsm_capable+0x9/0x20
[ 452.051870][T10751] ? security_capable+0x7e/0x2c0
[ 452.056947][T10751] genl_rcv_msg+0x61c/0x7a0
[ 452.061544][T10751] ? __pfx_genl_rcv_msg+0x10/0x10
[ 452.066597][T10751] ? __pfx_nl80211_pre_doit+0x10/0x10
[ 452.072129][T10751] ? __pfx_nl80211_set_interface+0x10/0x10
[ 452.077950][T10751] ? __pfx_nl80211_post_doit+0x10/0x10
[ 452.083476][T10751] ? __lock_acquire+0x6b5/0x2cf0
[ 452.088437][T10751] netlink_rcv_skb+0x232/0x4b0
[ 452.093327][T10751] ? __pfx_genl_rcv_msg+0x10/0x10
[ 452.098362][T10751] ? __pfx_netlink_rcv_skb+0x10/0x10
[ 452.103735][T10751] ? down_read+0x272/0x2e0
[ 452.108343][T10751] ? genl_rcv+0xd/0x40
[ 452.112532][T10751] genl_rcv+0x28/0x40
[ 452.116561][T10751] netlink_unicast+0x80f/0x9b0
[ 452.121421][T10751] ? __pfx_netlink_unicast+0x10/0x10
[ 452.126754][T10751] ? netlink_sendmsg+0x650/0xb40
[ 452.131893][T10751] ? skb_put+0x11b/0x210
[ 452.136261][T10751] netlink_sendmsg+0x813/0xb40
[ 452.141118][T10751] ? __pfx_netlink_sendmsg+0x10/0x10
[ 452.146436][T10751] ? aa_sock_msg_perm+0xf1/0x1b0
[ 452.151521][T10751] ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 452.156818][T10751] ? __pfx_netlink_sendmsg+0x10/0x10
[ 452.162146][T10751] __sys_sendto+0x672/0x710
[ 452.166796][T10751] ? __pfx___sys_sendto+0x10/0x10
[ 452.171906][T10751] ? fput_close_sync+0x11f/0x240
[ 452.176997][T10751] ? __pfx_fput_close_sync+0x10/0x10
[ 452.182459][T10751] __x64_sys_sendto+0xde/0x100
[ 452.187267][T10751] do_syscall_64+0x14d/0xf80
[ 452.192004][T10751] ? trace_irq_disable+0x3b/0x150
[ 452.197099][T10751] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 452.203299][T10751] ? clear_bhb_loop+0x40/0x90
[ 452.207996][T10751] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 452.213964][T10751] RIP: 0033:0x7f235b6c578e
[ 452.218414][T10751] Code: 08 0f 85 65 e1 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 90 41 57 41 56 4d 89 c6 41 55 4d 89 cd 41 54 55 53 48 83 ec 08
[ 452.238102][T10751] RSP: 002b:00007f235b663038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[ 452.246573][T10751] RAX: ffffffffffffffda RBX: 00007f235b6646c0 RCX: 00007f235b6c578e
[ 452.254635][T10751] RDX: 0000000000000024 RSI: 00007f235b6631a0 RDI: 000000000000000b
[ 452.262651][T10751] RBP: 000000000000000b R08: 00007f235b6630b4 R09: 000000000000000c
[ 452.270789][T10751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 452.278830][T10751] R13: 0000000000000000 R14: 00007f235b6631a0 R15: 0000000000000000
[ 452.286919][T10751]
[ 452.290020][T10751] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 452.297305][T10751] CPU: 1 UID: 0 PID: 10751 Comm: syz-executor243 Not tainted syzkaller #0 PREEMPT(full)
[ 452.307201][T10751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[ 452.317525][T10751] Call Trace:
[ 452.320892][T10751]
[ 452.323822][T10751] vpanic+0x56c/0xa60
[ 452.327848][T10751] ? __pfx__printk+0x10/0x10
[ 452.332434][T10751] ? __pfx_vpanic+0x10/0x10
[ 452.336945][T10751] ? is_bpf_text_address+0x292/0x2b0
[ 452.342229][T10751] ? is_bpf_text_address+0x26/0x2b0
[ 452.347423][T10751] panic+0xc5/0xd0
[ 452.351144][T10751] ? __pfx_panic+0x10/0x10
[ 452.355559][T10751] __warn+0x315/0x4f0
[ 452.359617][T10751] ? ieee80211_start_next_roc+0x1d8/0x240
[ 452.365363][T10751] ? ieee80211_start_next_roc+0x1d8/0x240
[ 452.371077][T10751] __report_bug+0x29a/0x540
[ 452.375683][T10751] ? __lock_acquire+0x6b5/0x2cf0
[ 452.380660][T10751] ? ieee80211_start_next_roc+0x1d8/0x240
[ 452.386386][T10751] ? __pfx___report_bug+0x10/0x10
[ 452.391430][T10751] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 452.397320][T10751] ? ieee80211_start_next_roc+0x1d8/0x240
[ 452.403061][T10751] report_bug+0x16a/0x220
[ 452.407402][T10751] ? ieee80211_start_next_roc+0x1d8/0x240
[ 452.413121][T10751] ? ieee80211_start_next_roc+0x1da/0x240
[ 452.418839][T10751] handle_bug+0x9c/0x200
[ 452.423141][T10751] exc_invalid_op+0x1a/0x50
[ 452.427636][T10751] asm_exc_invalid_op+0x1a/0x20
[ 452.432478][T10751] RIP: 0010:ieee80211_start_next_roc+0x1d8/0x240
[ 452.438899][T10751] Code: 4c 89 f7 48 89 de 48 89 c2 5b 41 5c 41 5e 41 5f 5d e9 6c 3c db ff e8 47 a3 aa f6 90 0f 0b 90 e9 c1 fe ff ff e8 39 a3 aa f6 90 <0f> 0b 90 e9 fe fe ff ff 48 c7 c1 c0 be 11 90 80 e1 07 80 c1 03 38
[ 452.458504][T10751] RSP: 0018:ffffc900038371f0 EFLAGS: 00010293
[ 452.464581][T10751] RAX: ffffffff8b1afa77 RBX: ffff888029050e80 RCX: ffff888036e0bd00
[ 452.472550][T10751] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[ 452.480514][T10751] RBP: 0000000000000001 R08: ffff888144a89807 R09: 1ffff11028951300
[ 452.488503][T10751] R10: dffffc0000000000 R11: ffffed1028951301 R12: dffffc0000000000
[ 452.496502][T10751] R13: dffffc0000000000 R14: ffff88803546e520 R15: ffff888029051626
[ 452.504499][T10751] ? ieee80211_start_next_roc+0x1d7/0x240
[ 452.510233][T10751] ieee80211_do_stop+0x233/0x2010
[ 452.515322][T10751] ? ieee80211_fill_ifcomb_params+0xd26/0xd50
[ 452.521387][T10751] ? do_raw_spin_lock+0x12b/0x2f0
[ 452.526420][T10751] ? __pfx_ieee80211_do_stop+0x10/0x10
[ 452.531875][T10751] ? ieee80211_stop_queues_by_reason+0x149/0x1a0
[ 452.538213][T10751] ieee80211_if_change_type+0x430/0x940
[ 452.543762][T10751] ieee80211_change_iface+0xd5/0x510
[ 452.549049][T10751] cfg80211_change_iface+0x6bf/0xed0
[ 452.554339][T10751] nl80211_set_interface+0x773/0xa90
[ 452.559624][T10751] ? __pfx_nl80211_set_interface+0x10/0x10
[ 452.565426][T10751] ? nl80211_pre_doit+0x4fb/0x930
[ 452.570444][T10751] genl_family_rcv_msg_doit+0x22a/0x330
[ 452.575986][T10751] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 452.582057][T10751] ? bpf_lsm_capable+0x9/0x20
[ 452.586732][T10751] ? security_capable+0x7e/0x2c0
[ 452.591668][T10751] genl_rcv_msg+0x61c/0x7a0
[ 452.596189][T10751] ? __pfx_genl_rcv_msg+0x10/0x10
[ 452.601227][T10751] ? __pfx_nl80211_pre_doit+0x10/0x10
[ 452.606614][T10751] ? __pfx_nl80211_set_interface+0x10/0x10
[ 452.612432][T10751] ? __pfx_nl80211_post_doit+0x10/0x10
[ 452.617891][T10751] ? __lock_acquire+0x6b5/0x2cf0
[ 452.622839][T10751] netlink_rcv_skb+0x232/0x4b0
[ 452.627611][T10751] ? __pfx_genl_rcv_msg+0x10/0x10
[ 452.632658][T10751] ? __pfx_netlink_rcv_skb+0x10/0x10
[ 452.637952][T10751] ? down_read+0x272/0x2e0
[ 452.642361][T10751] ? genl_rcv+0xd/0x40
[ 452.646418][T10751] genl_rcv+0x28/0x40
[ 452.650391][T10751] netlink_unicast+0x80f/0x9b0
[ 452.655165][T10751] ? __pfx_netlink_unicast+0x10/0x10
[ 452.660444][T10751] ? netlink_sendmsg+0x650/0xb40
[ 452.665380][T10751] ? skb_put+0x11b/0x210
[ 452.669623][T10751] netlink_sendmsg+0x813/0xb40
[ 452.674391][T10751] ? __pfx_netlink_sendmsg+0x10/0x10
[ 452.679673][T10751] ? aa_sock_msg_perm+0xf1/0x1b0
[ 452.684609][T10751] ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 452.689885][T10751] ? __pfx_netlink_sendmsg+0x10/0x10
[ 452.695176][T10751] __sys_sendto+0x672/0x710
[ 452.699702][T10751] ? __pfx___sys_sendto+0x10/0x10
[ 452.704748][T10751] ? fput_close_sync+0x11f/0x240
[ 452.709686][T10751] ? __pfx_fput_close_sync+0x10/0x10
[ 452.714973][T10751] __x64_sys_sendto+0xde/0x100
[ 452.719759][T10751] do_syscall_64+0x14d/0xf80
[ 452.724340][T10751] ? trace_irq_disable+0x3b/0x150
[ 452.729364][T10751] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 452.735775][T10751] ? clear_bhb_loop+0x40/0x90
[ 452.740452][T10751] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 452.746336][T10751] RIP: 0033:0x7f235b6c578e
[ 452.750751][T10751] Code: 08 0f 85 65 e1 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 90 41 57 41 56 4d 89 c6 41 55 4d 89 cd 41 54 55 53 48 83 ec 08
[ 452.770371][T10751] RSP: 002b:00007f235b663038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[ 452.778812][T10751] RAX: ffffffffffffffda RBX: 00007f235b6646c0 RCX: 00007f235b6c578e
[ 452.786838][T10751] RDX: 0000000000000024 RSI: 00007f235b6631a0 RDI: 000000000000000b
[ 452.794816][T10751] RBP: 000000000000000b R08: 00007f235b6630b4 R09: 000000000000000c
[ 452.802863][T10751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 452.810835][T10751] R13: 0000000000000000 R14: 00007f235b6631a0 R15: 0000000000000000
[ 452.818944][T10751]
[ 452.822235][T10751] Kernel Offset: disabled
[ 452.826551][T10751] Rebooting in 86400 seconds..