[ 81.727964][ T9] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.1.19' (ED25519) to the list of known hosts. 2025/08/02 20:24:39 ignoring optional flag "sandboxArg"="0" 2025/08/02 20:24:41 parsed 1 programs [ 88.396377][ T5798] cgroup: Unknown subsys name 'net' [ 88.563163][ T5798] cgroup: Unknown subsys name 'rlimit' [ 89.995518][ T5798] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 94.055947][ T5857] chnl_net:caif_netlink_parms(): no params data found [ 94.120947][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.128276][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.135435][ T5857] bridge_slave_0: entered allmulticast mode [ 94.142614][ T5857] bridge_slave_0: entered promiscuous mode [ 94.161324][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.168478][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.175576][ T5857] bridge_slave_1: entered allmulticast mode [ 94.182595][ T5857] bridge_slave_1: entered promiscuous mode [ 94.206038][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.230685][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.259680][ T5857] team0: Port device team_slave_0 added [ 94.267683][ T5857] team0: Port device team_slave_1 added [ 94.293076][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.300111][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.326092][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.340250][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.347273][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.373373][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.416287][ T5857] hsr_slave_0: entered promiscuous mode [ 94.423954][ T5857] hsr_slave_1: entered promiscuous mode [ 94.567046][ T5857] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.577521][ T5857] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.591464][ T5857] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.601794][ T5857] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.664328][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.671628][ T5857] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.679591][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.686724][ T5857] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.730482][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.748382][ T1123] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.756505][ T1123] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.781660][ T5857] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.793850][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.801034][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.813992][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.821138][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.994398][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.030811][ T5857] veth0_vlan: entered promiscuous mode [ 95.049625][ T5857] veth1_vlan: entered promiscuous mode [ 95.074578][ T5857] veth0_macvtap: entered promiscuous mode [ 95.084265][ T5857] veth1_macvtap: entered promiscuous mode [ 95.112059][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.125624][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.138461][ T5857] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.147807][ T5857] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.156920][ T5857] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.165621][ T5857] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.286615][ T5857] syz-executor (5857) used greatest stack depth: 20912 bytes left [ 95.470807][ T5885] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.479971][ T5885] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.489775][ T5885] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.498981][ T5885] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.507807][ T5885] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 95.515036][ T5885] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.556211][ T48] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.769981][ T1123] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.778176][ T1123] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.804003][ T1123] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.812346][ T1123] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/08/02 20:24:50 executed programs: 0 [ 96.184313][ T5105] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.192021][ T5105] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.199799][ T5105] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.208943][ T5105] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.221557][ T5105] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 96.229088][ T5105] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.355985][ T5901] chnl_net:caif_netlink_parms(): no params data found [ 96.419066][ T5901] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.427390][ T5901] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.434517][ T5901] bridge_slave_0: entered allmulticast mode [ 96.441613][ T5901] bridge_slave_0: entered promiscuous mode [ 96.451068][ T5901] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.458576][ T5901] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.465694][ T5901] bridge_slave_1: entered allmulticast mode [ 96.472706][ T5901] bridge_slave_1: entered promiscuous mode [ 96.500438][ T5901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.512503][ T5901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.545029][ T5901] team0: Port device team_slave_0 added [ 96.553289][ T5901] team0: Port device team_slave_1 added [ 96.579438][ T5901] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.587202][ T5901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.613979][ T5901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.627313][ T5901] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.634422][ T5901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.660604][ T5901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.703494][ T5901] hsr_slave_0: entered promiscuous mode [ 96.710309][ T5901] hsr_slave_1: entered promiscuous mode [ 96.716381][ T5901] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.724248][ T5901] Cannot create hsr debugfs directory [ 98.207710][ T48] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.287395][ T5885] Bluetooth: hci0: command tx timeout [ 100.377555][ T5885] Bluetooth: hci0: command tx timeout [ 100.487256][ T48] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.541426][ T48] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.422377][ T48] hsr_slave_0: left promiscuous mode [ 101.428500][ T48] hsr_slave_1: left promiscuous mode [ 101.434398][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.441905][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.450697][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.458167][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.465730][ T48] bridge_slave_1: left allmulticast mode [ 101.471831][ T48] bridge_slave_1: left promiscuous mode [ 101.478602][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.489646][ T48] bridge_slave_0: left allmulticast mode [ 101.495283][ T48] bridge_slave_0: left promiscuous mode [ 101.501143][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.520385][ T48] veth1_macvtap: left promiscuous mode [ 101.526336][ T48] veth0_macvtap: left promiscuous mode [ 101.532003][ T48] veth1_vlan: left promiscuous mode [ 101.538914][ T48] veth0_vlan: left promiscuous mode [ 101.853629][ T48] team0 (unregistering): Port device team_slave_1 removed [ 101.883407][ T48] team0 (unregistering): Port device team_slave_0 removed [ 101.911076][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.941264][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.211653][ T48] bond0 (unregistering): Released all slaves [ 102.308907][ T5901] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 102.319322][ T5901] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 102.329062][ T5901] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 102.340524][ T5901] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 102.415376][ T5901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.437039][ T5901] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.448339][ T5885] Bluetooth: hci0: command tx timeout [ 102.459993][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.467240][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.485995][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.493139][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.688993][ T5901] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.726378][ T5901] veth0_vlan: entered promiscuous mode [ 102.745194][ T5901] veth1_vlan: entered promiscuous mode [ 102.799270][ T5901] veth0_macvtap: entered promiscuous mode [ 102.808490][ T5901] veth1_macvtap: entered promiscuous mode [ 102.825116][ T5901] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.839881][ T5901] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.853051][ T5901] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.862927][ T5901] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.871874][ T5901] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.881497][ T5901] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.940413][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.951377][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/08/02 20:24:57 executed programs: 2 [ 102.983207][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.991835][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.042926][ T5952] netlink: 'syz.0.17': attribute type 10 has an invalid length. [ 103.067965][ T5952] team0: Port device wlan1 added [ 103.096915][ T5953] netlink: 'syz.0.18': attribute type 10 has an invalid length. [ 103.131391][ T5954] netlink: 'syz.0.19': attribute type 10 has an invalid length. [ 103.165667][ T5955] netlink: 'syz.0.20': attribute type 10 has an invalid length. [ 103.201410][ T5956] netlink: 'syz.0.21': attribute type 10 has an invalid length. [ 103.232330][ T5957] netlink: 'syz.0.22': attribute type 10 has an invalid length. [ 103.263671][ T5958] netlink: 'syz.0.23': attribute type 10 has an invalid length. [ 103.292004][ T5959] netlink: 'syz.0.24': attribute type 10 has an invalid length. [ 103.321112][ T5960] netlink: 'syz.0.25': attribute type 10 has an invalid length. [ 103.363153][ T5961] netlink: 'syz.0.26': attribute type 10 has an invalid length. [ 104.527890][ T5885] Bluetooth: hci0: command tx timeout 2025/08/02 20:25:02 executed programs: 229 [ 108.059655][ T6182] validate_nla: 219 callbacks suppressed [ 108.059669][ T6182] netlink: 'syz.0.246': attribute type 10 has an invalid length. [ 108.098082][ T6183] netlink: 'syz.0.247': attribute type 10 has an invalid length. [ 108.124031][ T6184] netlink: 'syz.0.248': attribute type 10 has an invalid length. [ 108.158679][ T6185] netlink: 'syz.0.249': attribute type 10 has an invalid length. [ 108.190279][ T6186] netlink: 'syz.0.250': attribute type 10 has an invalid length. [ 108.213899][ T6187] netlink: 'syz.0.251': attribute type 10 has an invalid length. [ 108.246378][ T6188] netlink: 'syz.0.252': attribute type 10 has an invalid length. [ 108.271607][ T6189] netlink: 'syz.0.253': attribute type 10 has an invalid length. [ 108.298282][ T6190] netlink: 'syz.0.254': attribute type 10 has an invalid length. [ 108.322950][ T6191] netlink: 'syz.0.255': attribute type 10 has an invalid length. 2025/08/02 20:25:07 executed programs: 472 [ 113.079027][ T6424] validate_nla: 232 callbacks suppressed [ 113.079267][ T6424] netlink: 'syz.0.488': attribute type 10 has an invalid length. [ 113.111244][ T6425] netlink: 'syz.0.489': attribute type 10 has an invalid length. [ 113.141425][ T6426] netlink: 'syz.0.490': attribute type 10 has an invalid length. [ 113.165900][ T6427] netlink: 'syz.0.491': attribute type 10 has an invalid length. [ 113.190129][ T6428] netlink: 'syz.0.492': attribute type 10 has an invalid length. [ 113.214098][ T6429] netlink: 'syz.0.493': attribute type 10 has an invalid length. [ 113.238094][ T6430] netlink: 'syz.0.494': attribute type 10 has an invalid length. [ 113.262915][ T6431] netlink: 'syz.0.495': attribute type 10 has an invalid length. [ 113.290534][ T6432] netlink: 'syz.0.496': attribute type 10 has an invalid length. [ 113.313859][ T6433] netlink: 'syz.0.497': attribute type 10 has an invalid length. [ 115.802653][ T5105] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 115.811926][ T5105] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 115.820014][ T5105] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 115.831860][ T5105] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 115.841743][ T5105] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 115.850201][ T5105] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 115.978960][ T6554] chnl_net:caif_netlink_parms(): no params data found [ 116.027863][ T6554] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.035010][ T6554] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.042624][ T6554] bridge_slave_0: entered allmulticast mode [ 116.050069][ T6554] bridge_slave_0: entered promiscuous mode [ 116.057923][ T6554] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.064985][ T6554] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.072508][ T6554] bridge_slave_1: entered allmulticast mode [ 116.079383][ T6554] bridge_slave_1: entered promiscuous mode [ 116.119974][ T42] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.138678][ T6554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.150425][ T6554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.176980][ T6554] team0: Port device team_slave_0 added [ 116.191854][ T42] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.206095][ T6554] team0: Port device team_slave_1 added [ 116.228851][ T6554] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.235801][ T6554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.261829][ T6554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.274714][ T6554] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.281708][ T6554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.310873][ T6554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.332180][ T42] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.367640][ T6554] hsr_slave_0: entered promiscuous mode [ 116.373869][ T6554] hsr_slave_1: entered promiscuous mode [ 116.393128][ T42] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.295314][ T6554] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 117.307342][ T6554] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 117.317171][ T6554] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 117.333384][ T42] [ 117.335719][ T42] ====================================================== [ 117.342714][ T42] WARNING: possible circular locking dependency detected [ 117.349742][ T42] 6.6.101-syzkaller #0 Not tainted [ 117.354835][ T42] ------------------------------------------------------ [ 117.361828][ T42] kworker/u4:2/42 is trying to acquire lock: [ 117.367780][ T42] ffff88806c238d00 (team->team_lock_key#2){+.+.}-{3:3}, at: team_del_slave+0x32/0x1c0 [ 117.377361][ T42] [ 117.377361][ T42] but task is already holding lock: [ 117.384700][ T42] ffff888021770768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x292/0x680 [ 117.395025][ T42] [ 117.395025][ T42] which lock already depends on the new lock. [ 117.395025][ T42] [ 117.405403][ T42] [ 117.405403][ T42] the existing dependency chain (in reverse order) is: [ 117.414395][ T42] [ 117.414395][ T42] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 117.422127][ T42] __mutex_lock+0x129/0xcc0 [ 117.427133][ T42] ieee80211_open+0x144/0x200 [ 117.432307][ T42] __dev_open+0x2bc/0x430 [ 117.437137][ T42] dev_open+0xab/0x170 [ 117.441702][ T42] team_add_slave+0xae7/0x2660 [ 117.446965][ T42] do_setlink+0xe14/0x3fb0 [ 117.451881][ T42] rtnl_newlink+0x175b/0x2020 [ 117.457055][ T42] rtnetlink_rcv_msg+0x7c7/0xf10 [ 117.462489][ T42] netlink_rcv_skb+0x216/0x480 [ 117.467747][ T42] netlink_unicast+0x751/0x8d0 [ 117.473116][ T42] netlink_sendmsg+0x8c1/0xbe0 [ 117.478374][ T42] ____sys_sendmsg+0x5bf/0x950 [ 117.483635][ T42] ___sys_sendmsg+0x220/0x290 [ 117.488813][ T42] __se_sys_sendmsg+0x1a5/0x270 [ 117.494164][ T42] do_syscall_64+0x55/0xb0 [ 117.499081][ T42] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 117.505489][ T42] [ 117.505489][ T42] -> #0 (team->team_lock_key#2){+.+.}-{3:3}: [ 117.513647][ T42] __lock_acquire+0x2ddb/0x7c80 [ 117.518999][ T42] lock_acquire+0x197/0x410 [ 117.523996][ T42] __mutex_lock+0x129/0xcc0 [ 117.528999][ T42] team_del_slave+0x32/0x1c0 [ 117.534082][ T42] team_device_event+0x28d/0xa20 [ 117.539535][ T42] notifier_call_chain+0x197/0x390 [ 117.545144][ T42] unregister_netdevice_many_notify+0xf36/0x1810 [ 117.551986][ T42] unregister_netdevice_queue+0x324/0x360 [ 117.558204][ T42] _cfg80211_unregister_wdev+0x16b/0x580 [ 117.564337][ T42] ieee80211_remove_interfaces+0x496/0x680 [ 117.570645][ T42] ieee80211_unregister_hw+0x5d/0x2a0 [ 117.576528][ T42] mac80211_hwsim_del_radio+0x274/0x450 [ 117.582569][ T42] hwsim_exit_net+0x585/0x640 [ 117.587742][ T42] cleanup_net+0x6f4/0xb90 [ 117.592656][ T42] process_scheduled_works+0xa45/0x15b0 [ 117.598699][ T42] worker_thread+0xa55/0xfc0 [ 117.603787][ T42] kthread+0x2fa/0x390 [ 117.608348][ T42] ret_from_fork+0x48/0x80 [ 117.613259][ T42] ret_from_fork_asm+0x11/0x20 [ 117.618519][ T42] [ 117.618519][ T42] other info that might help us debug this: [ 117.618519][ T42] [ 117.628721][ T42] Possible unsafe locking scenario: [ 117.628721][ T42] [ 117.636143][ T42] CPU0 CPU1 [ 117.641480][ T42] ---- ---- [ 117.646818][ T42] lock(&rdev->wiphy.mtx); [ 117.651295][ T42] lock(team->team_lock_key#2); [ 117.658730][ T42] lock(&rdev->wiphy.mtx); [ 117.665725][ T42] lock(team->team_lock_key#2); [ 117.670640][ T42] [ 117.670640][ T42] *** DEADLOCK *** [ 117.670640][ T42] [ 117.678757][ T42] 5 locks held by kworker/u4:2/42: [ 117.683836][ T42] #0: ffff888017873938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 117.694680][ T42] #1: ffffc90000b2fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 117.705177][ T42] #2: ffffffff8dfaea90 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x136/0xb90 [ 117.714541][ T42] #3: ffffffff8dfbb888 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0 [ 117.724339][ T42] #4: ffff888021770768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x292/0x680 [ 117.735096][ T42] [ 117.735096][ T42] stack backtrace: [ 117.740974][ T42] CPU: 0 PID: 42 Comm: kworker/u4:2 Not tainted 6.6.101-syzkaller #0 [ 117.749032][ T42] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 117.759067][ T42] Workqueue: netns cleanup_net [ 117.763819][ T42] Call Trace: [ 117.767080][ T42] [ 117.769992][ T42] dump_stack_lvl+0x16c/0x230 [ 117.774663][ T42] ? load_image+0x3b0/0x3b0 [ 117.779160][ T42] ? show_regs_print_info+0x20/0x20 [ 117.784335][ T42] ? print_circular_bug+0x12b/0x1a0 [ 117.789513][ T42] check_noncircular+0x2bd/0x3c0 [ 117.794431][ T42] ? print_deadlock_bug+0x5d0/0x5d0 [ 117.799605][ T42] ? lockdep_lock+0xe0/0x220 [ 117.804177][ T42] ? __lock_acquire+0x1334/0x7c80 [ 117.809181][ T42] ? _find_first_zero_bit+0xd3/0x100 [ 117.814444][ T42] __lock_acquire+0x2ddb/0x7c80 [ 117.819275][ T42] ? verify_lock_unused+0x140/0x140 [ 117.824453][ T42] ? verify_lock_unused+0x140/0x140 [ 117.829631][ T42] lock_acquire+0x197/0x410 [ 117.834124][ T42] ? team_del_slave+0x32/0x1c0 [ 117.838868][ T42] ? __might_sleep+0xe0/0xe0 [ 117.843435][ T42] ? read_lock_is_recursive+0x20/0x20 [ 117.848802][ T42] __mutex_lock+0x129/0xcc0 [ 117.853283][ T42] ? team_del_slave+0x32/0x1c0 [ 117.858024][ T42] ? __lock_acquire+0x7c80/0x7c80 [ 117.863026][ T42] ? rcu_is_watching+0x15/0xb0 [ 117.867770][ T42] ? trace_contention_end+0x39/0xe0 [ 117.872954][ T42] ? __mutex_lock+0x304/0xcc0 [ 117.877607][ T42] ? team_del_slave+0x32/0x1c0 [ 117.882344][ T42] ? mutex_lock_nested+0x20/0x20 [ 117.887261][ T42] ? bond_netdev_event+0xe1/0xef0 [ 117.892263][ T42] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 117.897875][ T42] ? bond_ipsec_offload_ok+0x410/0x410 [ 117.903318][ T42] team_del_slave+0x32/0x1c0 [ 117.907889][ T42] team_device_event+0x28d/0xa20 [ 117.912802][ T42] notifier_call_chain+0x197/0x390 [ 117.917891][ T42] unregister_netdevice_many_notify+0xf36/0x1810 [ 117.924198][ T42] ? lock_chain_count+0x20/0x20 [ 117.929026][ T42] ? unregister_netdevice_many+0x20/0x20 [ 117.934640][ T42] ? kernfs_remove_by_name_ns+0x117/0x150 [ 117.940340][ T42] ? __lock_acquire+0x7c80/0x7c80 [ 117.945340][ T42] unregister_netdevice_queue+0x324/0x360 [ 117.951041][ T42] ? list_netdevice+0x730/0x730 [ 117.955873][ T42] ? kernfs_remove_by_name_ns+0x117/0x150 [ 117.961569][ T42] _cfg80211_unregister_wdev+0x16b/0x580 [ 117.967202][ T42] ieee80211_remove_interfaces+0x496/0x680 [ 117.972989][ T42] ? ieee80211_do_stop+0x1db0/0x1db0 [ 117.978253][ T42] ? rcu_is_watching+0x15/0xb0 [ 117.983019][ T42] ieee80211_unregister_hw+0x5d/0x2a0 [ 117.988382][ T42] mac80211_hwsim_del_radio+0x274/0x450 [ 117.993928][ T42] ? rhashtable_remove_fast+0xbf0/0xbf0 [ 117.999454][ T42] hwsim_exit_net+0x585/0x640 [ 118.004129][ T42] ? hwsim_init_net+0x90/0x90 [ 118.008801][ T42] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 118.014601][ T42] cleanup_net+0x6f4/0xb90 [ 118.019009][ T42] ? ops_free_list+0x3b0/0x3b0 [ 118.023752][ T42] ? _raw_spin_unlock_irq+0x23/0x50 [ 118.028933][ T42] ? process_scheduled_works+0x957/0x15b0 [ 118.034632][ T42] ? process_scheduled_works+0x957/0x15b0 [ 118.040340][ T42] process_scheduled_works+0xa45/0x15b0 [ 118.045873][ T42] ? assign_work+0x400/0x400 [ 118.050445][ T42] ? assign_work+0x39e/0x400 [ 118.055016][ T42] worker_thread+0xa55/0xfc0 [ 118.059593][ T42] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 118.065473][ T42] ? _raw_spin_unlock+0x40/0x40 [ 118.070305][ T42] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 118.076185][ T42] kthread+0x2fa/0x390 [ 118.080250][ T42] ? pr_cont_work+0x560/0x560 [ 118.084906][ T42] ? kthread_blkcg+0xd0/0xd0 [ 118.089476][ T42] ret_from_fork+0x48/0x80 [ 118.093871][ T42] ? kthread_blkcg+0xd0/0xd0 [ 118.098439][ T42] ret_from_fork_asm+0x11/0x20 [ 118.103188][ T42] [ 118.108789][ T5885] Bluetooth: hci1: command tx timeout [ 118.114979][ T42] team0: Port device wlan1 removed [ 118.124604][ T6554] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 118.171408][ T6554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.198829][ T6554] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.209229][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.216295][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.228723][ T1123] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.235815][ T1123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.259728][ T42] hsr_slave_0: left promiscuous mode [ 118.265328][ T42] hsr_slave_1: left promiscuous mode [ 118.271119][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.279096][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.287077][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.294446][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.302522][ T42] bridge_slave_1: left allmulticast mode [ 118.308360][ T42] bridge_slave_1: left promiscuous mode [ 118.313970][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.322162][ T42] bridge_slave_0: left allmulticast mode [ 118.328122][ T42] bridge_slave_0: left promiscuous mode [ 118.333757][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.344010][ T42] veth1_macvtap: left promiscuous mode [ 118.349533][ T42] veth0_macvtap: left promiscuous mode [ 118.355055][ T42] veth1_vlan: left promiscuous mode [ 118.360791][ T42] veth0_vlan: left promiscuous mode [ 118.502610][ T42] team0 (unregistering): Port device team_slave_1 removed [ 118.523883][ T42] team0 (unregistering): Port device team_slave_0 removed [ 118.543532][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.564385][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.640060][ T42] bond0 (unregistering): Released all slaves [ 118.830644][ T6554] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.873976][ T6554] veth0_vlan: entered promiscuous mode [ 118.884962][ T6554] veth1_vlan: entered promiscuous mode [ 118.905212][ T6554] veth0_macvtap: entered promiscuous mode [ 118.914578][ T6554] veth1_macvtap: entered promiscuous mode [ 118.933686][ T6554] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.946238][ T6554] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.957115][ T6554] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.965824][ T6554] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.974971][ T6554] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.984743][ T6554] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.013760][ T6554] ieee80211 phy7: Selected rate control algorithm 'minstrel_ht' [ 119.031904][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.033408][ T6554] ieee80211 phy8: Selected rate control algorithm 'minstrel_ht' [ 119.041288][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.065905][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.074245][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/08/02 20:25:13 executed programs: 602 [ 119.105057][ T6599] validate_nla: 119 callbacks suppressed [ 119.105070][ T6599] netlink: 'syz.0.617': attribute type 10 has an invalid length. [ 119.128771][ T6599] team0: Port device wlan1 added [ 119.145831][ T6600] netlink: 'syz.0.618': attribute type 10 has an invalid length. [ 119.168624][ T6601] netlink: 'syz.0.619': attribute type 10 has an invalid length. [ 119.194904][ T6602] netlink: 'syz.0.620': attribute type 10 has an invalid length. [ 119.214125][ T6603] netlink: 'syz.0.621': attribute type 10 has an invalid length. [ 119.236321][ T6604] netlink: 'syz.0.622': attribute type 10 has an invalid length. [ 119.258795][ T6605] netlink: 'syz.0.623': attribute type 10 has an invalid length. [ 119.279929][ T6606] netlink: 'syz.0.624': attribute type 10 has an invalid length. [ 119.301419][ T6607] netlink: 'syz.0.625': attribute type 10 has an invalid length. [ 119.332056][ T6608] netlink: 'syz.0.626': attribute type 10 has an invalid length. [ 120.126686][ T5885] Bluetooth: hci1: command tx timeout [ 122.206706][ T5885] Bluetooth: hci1: command tx timeout 2025/08/02 20:25:18 executed programs: 894 [ 124.111271][ T6892] validate_nla: 283 callbacks suppressed [ 124.111282][ T6892] netlink: 'syz.0.910': attribute type 10 has an invalid length. [ 124.139428][ T6893] netlink: 'syz.0.911': attribute type 10 has an invalid length. [ 124.157711][ T6894] netlink: 'syz.0.912': attribute type 10 has an invalid length. [ 124.176376][ T6895] netlink: 'syz.0.913': attribute type 10 has an invalid length. [ 124.203797][ T6896] netlink: 'syz.0.914': attribute type 10 has an invalid length. [ 124.223014][ T6897] netlink: 'syz.0.915': attribute type 10 has an invalid length. [ 124.242251][ T6898] netlink: 'syz.0.916': attribute type 10 has an invalid length. [ 124.266331][ T6899] netlink: 'syz.0.917': attribute type 10 has an invalid length. [ 124.285069][ T6900] netlink: 'syz.0.918': attribute type 10 has an invalid length. [ 124.292948][ T5885] Bluetooth: hci1: command tx timeout [ 124.311239][ T6901] netlink: 'syz.0.919': attribute type 10 has an invalid length.