Warning: Permanently added '10.128.0.238' (ED25519) to the list of known hosts. 2026/04/01 02:51:53 parsed 1 programs [ 87.546777][ T5775] cgroup: Unknown subsys name 'net' [ 87.663475][ T5775] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 89.419375][ T5775] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.207702][ T966] cfg80211: failed to load regulatory.db [ 92.830951][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 92.926830][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.934846][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.942231][ T5819] bridge_slave_0: entered allmulticast mode [ 92.949653][ T5819] bridge_slave_0: entered promiscuous mode [ 92.959746][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.967117][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.974591][ T5819] bridge_slave_1: entered allmulticast mode [ 92.981941][ T5819] bridge_slave_1: entered promiscuous mode [ 93.016057][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.027987][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.066917][ T5819] team0: Port device team_slave_0 added [ 93.075222][ T5819] team0: Port device team_slave_1 added [ 93.101870][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.108965][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.134968][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.155756][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.162746][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.189053][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.231849][ T5819] hsr_slave_0: entered promiscuous mode [ 93.238383][ T5819] hsr_slave_1: entered promiscuous mode [ 93.457110][ T5819] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.480914][ T5819] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.495379][ T5819] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.505536][ T5819] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.532498][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.539863][ T5819] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.548044][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.555283][ T5819] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.647268][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.669917][ T4421] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.679335][ T4421] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.708265][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.726877][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.734116][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.760339][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.767533][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.999609][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.056135][ T5819] veth0_vlan: entered promiscuous mode [ 94.084206][ T5819] veth1_vlan: entered promiscuous mode [ 94.128686][ T5819] veth0_macvtap: entered promiscuous mode [ 94.139902][ T5819] veth1_macvtap: entered promiscuous mode [ 94.159990][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.179829][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.198533][ T5819] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.208705][ T5819] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.223311][ T5819] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.233565][ T5819] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.438284][ T1142] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.868933][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.877421][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.887636][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.897227][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.905947][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 95.914163][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.633698][ T4448] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.641834][ T4448] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.682056][ T4421] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.690530][ T4421] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.865506][ T1142] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/04/01 02:52:06 executed programs: 0 [ 97.410917][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.421198][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.430438][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.439491][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.448790][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 97.456692][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.617943][ T5880] chnl_net:caif_netlink_parms(): no params data found [ 97.690884][ T5880] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.698405][ T5880] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.706289][ T5880] bridge_slave_0: entered allmulticast mode [ 97.713423][ T5880] bridge_slave_0: entered promiscuous mode [ 97.721860][ T5880] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.730819][ T5880] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.738139][ T5880] bridge_slave_1: entered allmulticast mode [ 97.745964][ T5880] bridge_slave_1: entered promiscuous mode [ 97.779162][ T5880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.792229][ T5880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.826424][ T5880] team0: Port device team_slave_0 added [ 97.835424][ T5880] team0: Port device team_slave_1 added [ 97.862134][ T5880] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.869698][ T5880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.896224][ T5880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.908776][ T5880] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.915869][ T5880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.941920][ T5880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.989842][ T5880] hsr_slave_0: entered promiscuous mode [ 97.996661][ T5880] hsr_slave_1: entered promiscuous mode [ 98.003194][ T5880] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.011812][ T5880] Cannot create hsr debugfs directory [ 98.929077][ T1142] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.990328][ T1142] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.495911][ T51] Bluetooth: hci0: command tx timeout [ 99.897955][ T5880] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 99.910751][ T5880] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 99.946815][ T5880] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 99.960562][ T5880] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.085433][ T1142] hsr_slave_0: left promiscuous mode [ 100.092006][ T1142] hsr_slave_1: left promiscuous mode [ 100.102553][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.110783][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.122083][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.131114][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.142254][ T1142] bridge_slave_1: left allmulticast mode [ 100.149425][ T1142] bridge_slave_1: left promiscuous mode [ 100.158664][ T1142] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.177069][ T1142] bridge_slave_0: left allmulticast mode [ 100.182797][ T1142] bridge_slave_0: left promiscuous mode [ 100.189279][ T1142] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.227083][ T1142] veth1_macvtap: left promiscuous mode [ 100.233001][ T1142] veth0_macvtap: left promiscuous mode [ 100.241714][ T1142] veth1_vlan: left promiscuous mode [ 100.249485][ T1142] veth0_vlan: left promiscuous mode [ 100.810745][ T1142] team0 (unregistering): Port device team_slave_1 removed [ 100.846102][ T1142] team0 (unregistering): Port device team_slave_0 removed [ 100.882902][ T1142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.928439][ T1142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.182035][ T1142] bond0 (unregistering): Released all slaves [ 101.308079][ T5880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.334930][ T5880] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.348780][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.355963][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.398448][ T4462] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.405668][ T4462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.563925][ T51] Bluetooth: hci0: command tx timeout [ 101.652891][ T5880] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.699052][ T5880] veth0_vlan: entered promiscuous mode [ 101.718744][ T5880] veth1_vlan: entered promiscuous mode [ 101.777191][ T5880] veth0_macvtap: entered promiscuous mode [ 101.810398][ T5880] veth1_macvtap: entered promiscuous mode [ 101.865586][ T5880] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.889498][ T5880] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.910726][ T5880] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.920022][ T5880] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.929633][ T5880] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.940417][ T5880] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.050163][ T4436] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.059188][ T4436] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.090812][ T4462] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.099729][ T4462] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.156473][ T5922] netlink: 'syz.0.17': attribute type 10 has an invalid length. [ 102.182371][ T5922] team0: Port device wlan1 added [ 102.228994][ T5923] netlink: 'syz.0.18': attribute type 10 has an invalid length. [ 102.269599][ T5924] netlink: 'syz.0.19': attribute type 10 has an invalid length. 2026/04/01 02:52:11 executed programs: 6 [ 102.349746][ T5925] netlink: 'syz.0.20': attribute type 10 has an invalid length. [ 102.422305][ T5926] netlink: 'syz.0.21': attribute type 10 has an invalid length. [ 102.452497][ T5927] netlink: 'syz.0.22': attribute type 10 has an invalid length. [ 102.532878][ T5928] netlink: 'syz.0.23': attribute type 10 has an invalid length. [ 102.598959][ T5929] netlink: 'syz.0.24': attribute type 10 has an invalid length. [ 102.627468][ T5930] netlink: 'syz.0.25': attribute type 10 has an invalid length. [ 102.720361][ T5931] netlink: 'syz.0.26': attribute type 10 has an invalid length. [ 103.644275][ T51] Bluetooth: hci0: command tx timeout [ 105.724748][ T51] Bluetooth: hci0: command tx timeout [ 107.179354][ T6098] validate_nla: 166 callbacks suppressed [ 107.179368][ T6098] netlink: 'syz.0.193': attribute type 10 has an invalid length. [ 107.225524][ T6099] netlink: 'syz.0.194': attribute type 10 has an invalid length. [ 107.258358][ T6100] netlink: 'syz.0.195': attribute type 10 has an invalid length. [ 107.290399][ T6101] netlink: 'syz.0.196': attribute type 10 has an invalid length. [ 107.323080][ T6102] netlink: 'syz.0.197': attribute type 10 has an invalid length. 2026/04/01 02:52:16 executed programs: 184 [ 107.354059][ T6103] netlink: 'syz.0.198': attribute type 10 has an invalid length. [ 107.388185][ T6104] netlink: 'syz.0.199': attribute type 10 has an invalid length. [ 107.425605][ T6105] netlink: 'syz.0.200': attribute type 10 has an invalid length. [ 107.462579][ T6106] netlink: 'syz.0.201': attribute type 10 has an invalid length. [ 107.493036][ T6107] netlink: 'syz.0.202': attribute type 10 has an invalid length. [ 112.202710][ T6308] validate_nla: 200 callbacks suppressed [ 112.202723][ T6308] netlink: 'syz.0.403': attribute type 10 has an invalid length. [ 112.238457][ T6309] netlink: 'syz.0.404': attribute type 10 has an invalid length. [ 112.268133][ T6310] netlink: 'syz.0.405': attribute type 10 has an invalid length. [ 112.303241][ T6311] netlink: 'syz.0.406': attribute type 10 has an invalid length. [ 112.332053][ T6312] netlink: 'syz.0.407': attribute type 10 has an invalid length. [ 112.362869][ T6313] netlink: 'syz.0.408': attribute type 10 has an invalid length. 2026/04/01 02:52:21 executed programs: 395 [ 112.392355][ T6314] netlink: 'syz.0.409': attribute type 10 has an invalid length. [ 112.422820][ T6315] netlink: 'syz.0.410': attribute type 10 has an invalid length. [ 112.462828][ T6316] netlink: 'syz.0.411': attribute type 10 has an invalid length. [ 112.492003][ T6317] netlink: 'syz.0.412': attribute type 10 has an invalid length. [ 117.211243][ T6517] validate_nla: 199 callbacks suppressed [ 117.211293][ T6517] netlink: 'syz.0.612': attribute type 10 has an invalid length. [ 117.247601][ T6518] netlink: 'syz.0.613': attribute type 10 has an invalid length. [ 117.276733][ T6519] netlink: 'syz.0.614': attribute type 10 has an invalid length. [ 117.309019][ T6520] netlink: 'syz.0.615': attribute type 10 has an invalid length. [ 117.338821][ T6521] netlink: 'syz.0.616': attribute type 10 has an invalid length. [ 117.431469][ T5086] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 117.441797][ T5086] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 117.449939][ T5086] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 117.458678][ T5086] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 117.466630][ T5086] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 117.474755][ T5086] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 117.647810][ T6523] chnl_net:caif_netlink_parms(): no params data found [ 117.722603][ T4448] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.771706][ T6523] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.779159][ T6523] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.787932][ T6523] bridge_slave_0: entered allmulticast mode [ 117.796377][ T6523] bridge_slave_0: entered promiscuous mode [ 117.806048][ T6523] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.813298][ T6523] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.820754][ T6523] bridge_slave_1: entered allmulticast mode [ 117.830002][ T6523] bridge_slave_1: entered promiscuous mode [ 117.847621][ T4448] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.888955][ T6523] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.902584][ T6523] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.941171][ T4448] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.960046][ T6523] team0: Port device team_slave_0 added [ 117.969232][ T6523] team0: Port device team_slave_1 added [ 117.993273][ T6523] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.000357][ T6523] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.026468][ T6523] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.039187][ T6523] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.046655][ T6523] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.075225][ T6523] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.099198][ T4448] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.142934][ T6523] hsr_slave_0: entered promiscuous mode [ 118.150041][ T6523] hsr_slave_1: entered promiscuous mode [ 119.069936][ T4448] [ 119.072349][ T4448] ====================================================== [ 119.079395][ T4448] WARNING: possible circular locking dependency detected [ 119.086557][ T4448] syzkaller #0 Not tainted [ 119.091005][ T4448] ------------------------------------------------------ [ 119.098054][ T4448] kworker/u4:11/4448 is trying to acquire lock: [ 119.104324][ T4448] ffff888061fd0d00 (team->team_lock_key#2){+.+.}-{3:3}, at: team_del_slave+0x32/0x1c0 [ 119.114003][ T4448] [ 119.114003][ T4448] but task is already holding lock: [ 119.121411][ T4448] ffff888069f00768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x29a/0x690 [ 119.131825][ T4448] [ 119.131825][ T4448] which lock already depends on the new lock. [ 119.131825][ T4448] [ 119.142266][ T4448] [ 119.142266][ T4448] the existing dependency chain (in reverse order) is: [ 119.151313][ T4448] [ 119.151313][ T4448] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 119.159213][ T4448] __mutex_lock+0x136/0xcc0 [ 119.164287][ T4448] ieee80211_open+0x144/0x200 [ 119.169530][ T4448] __dev_open+0x2cb/0x430 [ 119.174422][ T4448] dev_open+0xab/0x190 [ 119.179051][ T4448] team_add_slave+0x75f/0x29a0 [ 119.184382][ T4448] do_setlink+0xdfe/0x4130 [ 119.189367][ T4448] rtnl_newlink+0x17da/0x20a0 [ 119.194605][ T4448] rtnetlink_rcv_msg+0x869/0xfa0 [ 119.200110][ T4448] netlink_rcv_skb+0x241/0x4d0 [ 119.205448][ T4448] netlink_unicast+0x751/0x8d0 [ 119.210782][ T4448] netlink_sendmsg+0x8d0/0xbf0 [ 119.216122][ T4448] ____sys_sendmsg+0x5ba/0x960 [ 119.221448][ T4448] ___sys_sendmsg+0x2a6/0x360 [ 119.226683][ T4448] __se_sys_sendmsg+0x1c2/0x2b0 [ 119.232105][ T4448] do_syscall_64+0x55/0xa0 [ 119.237092][ T4448] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 119.243557][ T4448] [ 119.243557][ T4448] -> #0 (team->team_lock_key#2){+.+.}-{3:3}: [ 119.251778][ T4448] __lock_acquire+0x2df1/0x7d40 [ 119.257198][ T4448] lock_acquire+0x19e/0x420 [ 119.262281][ T4448] __mutex_lock+0x136/0xcc0 [ 119.267434][ T4448] team_del_slave+0x32/0x1c0 [ 119.272605][ T4448] team_device_event+0x28d/0xa20 [ 119.278112][ T4448] notifier_call_chain+0x197/0x380 [ 119.283793][ T4448] unregister_netdevice_many_notify+0x100d/0x1900 [ 119.290861][ T4448] unregister_netdevice_queue+0x32c/0x370 [ 119.297159][ T4448] _cfg80211_unregister_wdev+0x16b/0x580 [ 119.303353][ T4448] ieee80211_remove_interfaces+0x49e/0x690 [ 119.309728][ T4448] ieee80211_unregister_hw+0x5d/0x2a0 [ 119.315671][ T4448] mac80211_hwsim_del_radio+0x289/0x480 [ 119.321782][ T4448] hwsim_exit_net+0x58d/0x650 [ 119.327022][ T4448] cleanup_net+0x70a/0xbb0 [ 119.332001][ T4448] process_scheduled_works+0xa5d/0x15d0 [ 119.338118][ T4448] worker_thread+0xa55/0xfc0 [ 119.343274][ T4448] kthread+0x2fa/0x390 [ 119.347918][ T4448] ret_from_fork+0x48/0x80 [ 119.352899][ T4448] ret_from_fork_asm+0x11/0x20 [ 119.358228][ T4448] [ 119.358228][ T4448] other info that might help us debug this: [ 119.358228][ T4448] [ 119.368578][ T4448] Possible unsafe locking scenario: [ 119.368578][ T4448] [ 119.376087][ T4448] CPU0 CPU1 [ 119.381591][ T4448] ---- ---- [ 119.386998][ T4448] lock(&rdev->wiphy.mtx); [ 119.391549][ T4448] lock(team->team_lock_key#2); [ 119.399062][ T4448] lock(&rdev->wiphy.mtx); [ 119.406136][ T4448] lock(team->team_lock_key#2); [ 119.411130][ T4448] [ 119.411130][ T4448] *** DEADLOCK *** [ 119.411130][ T4448] [ 119.419353][ T4448] 5 locks held by kworker/u4:11/4448: [ 119.424849][ T4448] #0: ffff88801a254938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 119.435789][ T4448] #1: ffffc9000ebe7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 119.446386][ T4448] #2: ffffffff8e3b4950 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x14c/0xbb0 [ 119.455869][ T4448] #3: ffffffff8e3c1988 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0 [ 119.465789][ T4448] #4: ffff888069f00768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x29a/0x690 [ 119.476641][ T4448] [ 119.476641][ T4448] stack backtrace: [ 119.482579][ T4448] CPU: 0 PID: 4448 Comm: kworker/u4:11 Not tainted syzkaller #0 [ 119.490266][ T4448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 119.500359][ T4448] Workqueue: netns cleanup_net [ 119.505209][ T4448] Call Trace: [ 119.508627][ T4448] [ 119.511591][ T4448] dump_stack_lvl+0x18c/0x250 [ 119.516424][ T4448] ? load_image+0x400/0x400 [ 119.520990][ T4448] ? show_regs_print_info+0x20/0x20 [ 119.526260][ T4448] ? print_circular_bug+0x12b/0x1a0 [ 119.531516][ T4448] check_noncircular+0x2fc/0x400 [ 119.536505][ T4448] ? print_deadlock_bug+0x5d0/0x5d0 [ 119.541749][ T4448] ? lockdep_lock+0xf5/0x230 [ 119.546398][ T4448] ? __lock_acquire+0x1273/0x7d40 [ 119.551480][ T4448] ? _find_first_zero_bit+0xd3/0x100 [ 119.556821][ T4448] __lock_acquire+0x2df1/0x7d40 [ 119.561741][ T4448] ? verify_lock_unused+0x140/0x140 [ 119.563986][ T5086] Bluetooth: hci1: command tx timeout [ 119.566980][ T4448] ? verify_lock_unused+0x140/0x140 [ 119.577684][ T4448] lock_acquire+0x19e/0x420 [ 119.582233][ T4448] ? team_del_slave+0x32/0x1c0 [ 119.587059][ T4448] ? __might_sleep+0xe0/0xe0 [ 119.591699][ T4448] ? read_lock_is_recursive+0x20/0x20 [ 119.597115][ T4448] __mutex_lock+0x136/0xcc0 [ 119.601650][ T4448] ? team_del_slave+0x32/0x1c0 [ 119.606454][ T4448] ? __lock_acquire+0x7d40/0x7d40 [ 119.611573][ T4448] ? rcu_is_watching+0x15/0xb0 [ 119.616350][ T4448] ? trace_contention_end+0x39/0xe0 [ 119.621552][ T4448] ? __mutex_lock+0x315/0xcc0 [ 119.626237][ T4448] ? team_del_slave+0x32/0x1c0 [ 119.631222][ T4448] ? mutex_lock_nested+0x20/0x20 [ 119.636294][ T4448] ? bond_netdev_event+0xeb/0xf20 [ 119.641701][ T4448] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 119.647461][ T4448] team_del_slave+0x32/0x1c0 [ 119.652188][ T4448] team_device_event+0x28d/0xa20 [ 119.657171][ T4448] notifier_call_chain+0x197/0x380 [ 119.662324][ T4448] unregister_netdevice_many_notify+0x100d/0x1900 [ 119.668757][ T4448] ? lock_chain_count+0x20/0x20 [ 119.673630][ T4448] ? unregister_netdevice_many+0x20/0x20 [ 119.679292][ T4448] ? kernfs_remove_by_name_ns+0x117/0x150 [ 119.685205][ T4448] ? __lock_acquire+0x7d40/0x7d40 [ 119.690254][ T4448] unregister_netdevice_queue+0x32c/0x370 [ 119.696107][ T4448] ? list_netdevice+0x730/0x730 [ 119.700992][ T4448] ? kernfs_remove_by_name_ns+0x117/0x150 [ 119.706742][ T4448] _cfg80211_unregister_wdev+0x16b/0x580 [ 119.712407][ T4448] ieee80211_remove_interfaces+0x49e/0x690 [ 119.718236][ T4448] ? ieee80211_do_stop+0x1e20/0x1e20 [ 119.723547][ T4448] ? rcu_is_watching+0x15/0xb0 [ 119.728349][ T4448] ieee80211_unregister_hw+0x5d/0x2a0 [ 119.733733][ T4448] mac80211_hwsim_del_radio+0x289/0x480 [ 119.739292][ T4448] ? rhashtable_remove_fast+0xc00/0xc00 [ 119.744849][ T4448] hwsim_exit_net+0x58d/0x650 [ 119.749976][ T4448] ? hwsim_init_net+0x90/0x90 [ 119.754679][ T4448] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 119.760495][ T4448] cleanup_net+0x70a/0xbb0 [ 119.764934][ T4448] ? ops_free_list+0x3b0/0x3b0 [ 119.769716][ T4448] ? _raw_spin_unlock_irq+0x23/0x50 [ 119.774924][ T4448] ? process_scheduled_works+0x96f/0x15d0 [ 119.780667][ T4448] ? process_scheduled_works+0x96f/0x15d0 [ 119.786394][ T4448] process_scheduled_works+0xa5d/0x15d0 [ 119.791962][ T4448] ? worker_attach_to_pool+0x380/0x380 [ 119.797429][ T4448] ? assign_work+0x3d2/0x5d0 [ 119.802027][ T4448] worker_thread+0xa55/0xfc0 [ 119.806638][ T4448] kthread+0x2fa/0x390 [ 119.810710][ T4448] ? pr_cont_work+0x560/0x560 [ 119.815392][ T4448] ? kthread_blkcg+0xd0/0xd0 [ 119.819998][ T4448] ret_from_fork+0x48/0x80 [ 119.824436][ T4448] ? kthread_blkcg+0xd0/0xd0 [ 119.829042][ T4448] ret_from_fork_asm+0x11/0x20 [ 119.833835][ T4448] [ 119.839567][ T4448] team0: Port device wlan1 removed [ 119.850798][ T6523] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 119.860480][ T6523] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 119.876877][ T6523] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 119.888026][ T6523] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 119.969578][ T4448] hsr_slave_0: left promiscuous mode [ 119.975887][ T4448] hsr_slave_1: left promiscuous mode [ 119.981688][ T4448] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.992107][ T4448] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.000421][ T4448] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.008124][ T4448] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.015915][ T4448] bridge_slave_1: left allmulticast mode [ 120.021678][ T4448] bridge_slave_1: left promiscuous mode [ 120.027604][ T4448] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.036290][ T4448] bridge_slave_0: left allmulticast mode [ 120.041951][ T4448] bridge_slave_0: left promiscuous mode [ 120.047972][ T4448] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.058893][ T4448] veth1_macvtap: left promiscuous mode [ 120.065626][ T4448] veth0_macvtap: left promiscuous mode [ 120.071198][ T4448] veth1_vlan: left promiscuous mode [ 120.076569][ T4448] veth0_vlan: left promiscuous mode [ 120.271458][ T4448] team0 (unregistering): Port device team_slave_1 removed [ 120.301549][ T4448] team0 (unregistering): Port device team_slave_0 removed [ 120.325258][ T4448] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.348815][ T4448] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 120.477323][ T4448] bond0 (unregistering): Released all slaves [ 120.555001][ T6523] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.571855][ T6523] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.584154][ T743] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.591309][ T743] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.609340][ T4421] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.616757][ T4421] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.804920][ T6523] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.851769][ T6523] veth0_vlan: entered promiscuous mode [ 120.869962][ T6523] veth1_vlan: entered promiscuous mode [ 120.899221][ T6523] veth0_macvtap: entered promiscuous mode [ 120.908383][ T6523] veth1_macvtap: entered promiscuous mode [ 120.928564][ T6523] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.941468][ T6523] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.953035][ T6523] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.962625][ T6523] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.972380][ T6523] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.981234][ T6523] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.011211][ T6523] ieee80211 phy7: Selected rate control algorithm 'minstrel_ht' [ 121.035235][ T743] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.040306][ T6523] ieee80211 phy8: Selected rate control algorithm 'minstrel_ht' [ 121.043278][ T743] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/04/01 02:52:29 executed programs: 602 [ 121.076292][ T4448] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.084389][ T4448] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.121147][ T6565] netlink: 'syz.0.617': attribute type 10 has an invalid length. [ 121.137217][ T6565] team0: Port device wlan1 added [ 121.177959][ T6567] netlink: 'syz.0.618': attribute type 10 has an invalid length. [ 121.212231][ T6568] netlink: 'syz.0.619': attribute type 10 has an invalid length. [ 121.236857][ T6569] netlink: 'syz.0.620': attribute type 10 has an invalid length. [ 121.259939][ T6570] netlink: 'syz.0.621': attribute type 10 has an invalid length. [ 121.646054][ T5086] Bluetooth: hci1: command tx timeout [ 122.216694][ T6620] validate_nla: 47 callbacks suppressed [ 122.216706][ T6620] netlink: 'syz.0.669': attribute type 10 has an invalid length. [ 122.247739][ T6621] netlink: 'syz.0.670': attribute type 10 has an invalid length. [ 122.272812][ T6622] netlink: 'syz.0.671': attribute type 10 has an invalid length. [ 122.298162][ T6623] netlink: 'syz.0.672': attribute type 10 has an invalid length. [ 122.328741][ T6624] netlink: 'syz.0.673': attribute type 10 has an invalid length. [ 122.352677][ T6625] netlink: 'syz.0.674': attribute type 10 has an invalid length. [ 122.377312][ T6626] netlink: 'syz.0.675': attribute type 10 has an invalid length. [ 122.400941][ T6627] netlink: 'syz.0.676': attribute type 10 has an invalid length. [ 122.431655][ T6628] netlink: 'syz.0.677': attribute type 10 has an invalid length. [ 122.455414][ T6629] netlink: 'syz.0.678': attribute type 10 has an invalid length. [ 123.724843][ T5086] Bluetooth: hci1: command tx timeout [ 125.803470][ T5086] Bluetooth: hci1: command tx timeout 2026/04/01 02:52:34 executed programs: 855 [ 127.249428][ T6883] validate_nla: 253 callbacks suppressed [ 127.249441][ T6883] netlink: 'syz.0.932': attribute type 10 has an invalid length. [ 127.284619][ T6884] netlink: 'syz.0.933': attribute type 10 has an invalid length. [ 127.306839][ T6885] netlink: 'syz.0.934': attribute type 10 has an invalid length. [ 127.330616][ T6886] netlink: 'syz.0.935': attribute type 10 has an invalid length. [ 127.351894][ T6887] netlink: 'syz.0.936': attribute type 10 has an invalid length. [ 127.375540][ T6888] netlink: 'syz.0.937': attribute type 10 has an invalid length. [ 127.407049][ T6889] netlink: 'syz.0.938': attribute type 10 has an invalid length. [ 127.429208][ T6890] netlink: 'syz.0.939': attribute type 10 has an invalid length. [ 127.457145][ T6891] netlink: 'syz.0.940': attribute type 10 has an invalid length. [ 127.480808][ T6892] netlink: 'syz.0.941': attribute type 10 has an invalid length.