[ 398.620942][ T4962] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.659893][ T4962] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.720793][ T4962] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.759911][ T4962] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.908305][ T4962] device hsr_slave_0 left promiscuous mode [ 399.955758][ T4962] device hsr_slave_1 left promiscuous mode [ 400.055489][ T4962] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 400.056775][ T4962] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 400.058878][ T4962] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 400.060254][ T4962] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 400.061756][ T4962] device bridge_slave_1 left promiscuous mode [ 400.062962][ T4962] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.106308][ T4962] device bridge_slave_0 left promiscuous mode [ 400.107515][ T4962] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.265599][ T4962] device veth1_macvtap left promiscuous mode [ 400.266736][ T4962] device veth0_macvtap left promiscuous mode [ 400.267870][ T4962] device veth1_vlan left promiscuous mode [ 400.268948][ T4962] device veth0_vlan left promiscuous mode [ 400.379825][ T4962] team0 (unregistering): Port device team_slave_1 removed [ 400.384954][ T4962] team0 (unregistering): Port device team_slave_0 removed [ 400.389652][ T4962] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 400.432517][ T4962] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 400.522732][ T4962] bond0 (unregistering): Released all slaves [ 403.424561][ T4962] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 Warning: Permanently added '10.128.10.11' (ED25519) to the list of known hosts. [ 403.471852][ T4962] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.509871][ T4962] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.562977][ T4962] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.872317][ T4962] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.957982][ T4962] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.041019][ T4962] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.125961][ T4962] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.513792][ T4962] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.619036][ T4962] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.689506][ T4962] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.772358][ T4962] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.121258][ T4962] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.197258][ T4962] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.347421][ T4962] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.464781][ T4962] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.827252][ T4962] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.934944][ T4962] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.072978][ T4962] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.172880][ T4962] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.457086][ T4962] device hsr_slave_0 left promiscuous mode [ 411.496433][ T4962] device hsr_slave_1 left promiscuous mode [ 411.575693][ T4962] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 411.577168][ T4962] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 411.578941][ T4962] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 411.580407][ T4962] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 411.581953][ T4962] device bridge_slave_1 left promiscuous mode [ 411.584310][ T4962] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.636217][ T4962] device bridge_slave_0 left promiscuous mode [ 411.637398][ T4962] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.679030][ T4962] device hsr_slave_0 left promiscuous mode [ 411.715682][ T4962] device hsr_slave_1 left promiscuous mode [ 411.805551][ T4962] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 411.807017][ T4962] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 411.808625][ T4962] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 411.809942][ T4962] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 411.811456][ T4962] device bridge_slave_1 left promiscuous mode [ 411.812549][ T4962] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.846077][ T4962] device bridge_slave_0 left promiscuous mode [ 411.847305][ T4962] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.899633][ T4962] device hsr_slave_0 left promiscuous mode [ 411.935551][ T4962] device hsr_slave_1 left promiscuous mode [ 412.035602][ T4962] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 412.037049][ T4962] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 412.039314][ T4962] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 412.040481][ T4962] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 412.041874][ T4962] device bridge_slave_1 left promiscuous mode [ 412.042931][ T4962] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.076179][ T4962] device bridge_slave_0 left promiscuous mode [ 412.077272][ T4962] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.128273][ T4962] device hsr_slave_0 left promiscuous mode [ 412.165612][ T4962] device hsr_slave_1 left promiscuous mode [ 412.255521][ T4962] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 412.256853][ T4962] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 412.258865][ T4962] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 412.260194][ T4962] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 412.261688][ T4962] device bridge_slave_1 left promiscuous mode [ 412.262749][ T4962] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.296226][ T4962] device bridge_slave_0 left promiscuous mode [ 412.297537][ T4962] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.338301][ T4962] device hsr_slave_0 left promiscuous mode [ 412.385627][ T4962] device hsr_slave_1 left promiscuous mode [ 412.475538][ T4962] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 412.477038][ T4962] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 412.479212][ T4962] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 412.480453][ T4962] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 412.482317][ T4962] device bridge_slave_1 left promiscuous mode [ 412.483473][ T4962] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.516137][ T4962] device bridge_slave_0 left promiscuous mode [ 412.517343][ T4962] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.655588][ T4962] device veth1_macvtap left promiscuous mode [ 412.656902][ T4962] device veth0_macvtap left promiscuous mode [ 412.657972][ T4962] device veth1_vlan left promiscuous mode [ 412.658934][ T4962] device veth0_vlan left promiscuous mode [ 412.745589][ T4962] device veth1_macvtap left promiscuous mode [ 412.746884][ T4962] device veth0_macvtap left promiscuous mode [ 412.748091][ T4962] device veth1_vlan left promiscuous mode [ 412.749190][ T4962] device veth0_vlan left promiscuous mode [ 412.835621][ T4962] device veth1_macvtap left promiscuous mode [ 412.836835][ T4962] device veth0_macvtap left promiscuous mode [ 412.838004][ T4962] device veth1_vlan left promiscuous mode [ 412.839109][ T4962] device veth0_vlan left promiscuous mode [ 412.925582][ T4962] device veth1_macvtap left promiscuous mode [ 412.926637][ T4962] device veth0_macvtap left promiscuous mode [ 412.927617][ T4962] device veth1_vlan left promiscuous mode [ 412.928538][ T4962] device veth0_vlan left promiscuous mode [ 413.015633][ T4962] device veth1_macvtap left promiscuous mode [ 413.016809][ T4962] device veth0_macvtap left promiscuous mode [ 413.017950][ T4962] device veth1_vlan left promiscuous mode [ 413.018989][ T4962] device veth0_vlan left promiscuous mode [ 413.380233][ T4962] team0 (unregistering): Port device team_slave_1 removed [ 413.389922][ T4962] team0 (unregistering): Port device team_slave_0 removed [ 413.394518][ T4962] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 413.449800][ T4962] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 413.551154][ T4962] bond0 (unregistering): Released all slaves [ 413.694628][ T4962] team0 (unregistering): Port device team_slave_1 removed [ 413.699536][ T4962] team0 (unregistering): Port device team_slave_0 removed [ 413.704077][ T4962] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 413.750035][ T4962] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 413.861561][ T4962] bond0 (unregistering): Released all slaves [ 413.987327][ T4962] team0 (unregistering): Port device team_slave_1 removed [ 413.992682][ T4962] team0 (unregistering): Port device team_slave_0 removed [ 413.997480][ T4962] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 414.062897][ T4962] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 414.151633][ T4962] bond0 (unregistering): Released all slaves [ 414.297041][ T4962] team0 (unregistering): Port device team_slave_1 removed [ 414.301921][ T4962] team0 (unregistering): Port device team_slave_0 removed [ 414.311285][ T4962] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 414.349943][ T4962] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 414.441045][ T4962] bond0 (unregistering): Released all slaves [ 414.575049][ T4962] team0 (unregistering): Port device team_slave_1 removed [ 414.580636][ T4962] team0 (unregistering): Port device team_slave_0 removed [ 414.585211][ T4962] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 414.630725][ T4962] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 414.739528][ T4962] bond0 (unregistering): Released all slaves [ 424.145771][T30884] ------------[ cut here ]------------ [ 424.147032][T30884] WARNING: CPU: 1 PID: 30884 at net/mac80211/offchannel.c:401 ieee80211_start_next_roc+0x188/0x1f0 [ 424.148855][T30884] Modules linked in: [ 424.149557][T30884] CPU: 1 PID: 30884 Comm: syz-executor447 Not tainted syzkaller #0 [ 424.150978][T30884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 424.152789][T30884] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 424.154176][T30884] pc : ieee80211_start_next_roc+0x188/0x1f0 [ 424.155174][T30884] lr : ieee80211_start_next_roc+0x188/0x1f0 [ 424.156143][T30884] sp : ffff800020707010 [ 424.156835][T30884] x29: ffff800020707010 x28: 1fffe00019ce854e x27: 0000000000000001 [ 424.158269][T30884] x26: dfff800000000000 x25: ffff0000d7a6b000 x24: ffff0000ce742c10 [ 424.159694][T30884] x23: ffff8000143ad110 x22: ffff0000ce7428a0 x21: dfff800000000000 [ 424.161122][T30884] x20: ffff0000c1e90c20 x19: ffff0000ce740e20 x18: 0000000000000000 [ 424.162556][T30884] x17: 0000000000000000 x16: ffff8000082c5328 x15: 000000000000000a [ 424.163997][T30884] x14: 0000000000000001 x13: 1ffff000040e0de0 x12: 0000000000000000 [ 424.165444][T30884] x11: ff80800010c79bd0 x10: 0000000000000000 x9 : ffff800010c79bd0 [ 424.166856][T30884] x8 : ffff0000d0ca0000 x7 : ffff800010c976c4 x6 : 0000000000000000 [ 424.168349][T30884] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff80001143ae0c [ 424.169740][T30884] x2 : 0000000000000000 x1 : 0000000000000001 x0 : 0000000000000000 [ 424.171172][T30884] Call trace: [ 424.171731][T30884] ieee80211_start_next_roc+0x188/0x1f0 [ 424.172738][T30884] __ieee80211_scan_completed+0x780/0xbec [ 424.173758][T30884] ieee80211_scan_cancel+0xec/0x864 [ 424.174713][T30884] ieee80211_do_stop+0x178/0x1a68 [ 424.175616][T30884] ieee80211_if_change_type+0x3fc/0xc0c [ 424.176626][T30884] ieee80211_change_iface+0x64/0x384 [ 424.177571][T30884] cfg80211_change_iface+0x75c/0x12c4 [ 424.178535][T30884] nl80211_set_interface+0x490/0x6ac [ 424.179466][T30884] genl_rcv_msg+0x974/0xc64 [ 424.180267][T30884] netlink_rcv_skb+0x218/0x3dc [ 424.181107][T30884] genl_rcv+0x38/0x50 [ 424.181815][T30884] netlink_unicast+0x614/0x884 [ 424.182616][T30884] netlink_sendmsg+0x6ec/0x9e4 [ 424.183473][T30884] __sys_sendto+0x30c/0x420 [ 424.184286][T30884] __arm64_sys_sendto+0xe4/0x104 [ 424.185151][T30884] invoke_syscall+0x98/0x28c [ 424.185962][T30884] el0_svc_common+0x13c/0x258 [ 424.186858][T30884] do_el0_svc+0x5c/0x140 [ 424.187626][T30884] el0_svc+0x78/0x1d0 [ 424.188350][T30884] el0t_64_sync_handler+0xcc/0xe4 [ 424.189243][T30884] el0t_64_sync+0x1a0/0x1a4 [ 424.190065][T30884] irq event stamp: 1726 [ 424.190823][T30884] hardirqs last enabled at (1725): [] _raw_spin_unlock_irqrestore+0xa8/0x14c [ 424.192713][T30884] hardirqs last disabled at (1726): [] el1_dbg+0x24/0x80 [ 424.194194][T30884] softirqs last enabled at (1722): [] ieee80211_configure_filter+0x4f4/0xf24 [ 424.195963][T30884] softirqs last disabled at (1720): [] ieee80211_configure_filter+0x32c/0xf24 [ 424.197791][T30884] ---[ end trace c70ca4513accc09c ]---