Warning: Permanently added '10.128.10.7' (ED25519) to the list of known hosts. 2025/09/14 07:58:01 parsed 1 programs [ 91.922697][ T5800] cgroup: Unknown subsys name 'net' [ 92.059363][ T5800] cgroup: Unknown subsys name 'rlimit' [ 92.162935][ T8] cfg80211: failed to load regulatory.db [ 93.808026][ T5800] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 97.787080][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 97.879830][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.891996][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.899254][ T5846] bridge_slave_0: entered allmulticast mode [ 97.907025][ T5846] bridge_slave_0: entered promiscuous mode [ 97.926154][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.933866][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.941246][ T5846] bridge_slave_1: entered allmulticast mode [ 97.948291][ T5846] bridge_slave_1: entered promiscuous mode [ 97.994814][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.006436][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.059152][ T5846] team0: Port device team_slave_0 added [ 98.067309][ T5846] team0: Port device team_slave_1 added [ 98.109152][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.117243][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.143288][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.157854][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.165008][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.191009][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.244518][ T5846] hsr_slave_0: entered promiscuous mode [ 98.252226][ T5846] hsr_slave_1: entered promiscuous mode [ 98.448236][ T5846] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 98.460633][ T5846] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 98.473800][ T5846] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 98.484138][ T5846] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 98.535699][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.543138][ T5846] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.551413][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.558552][ T5846] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.624976][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.646759][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.656046][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.675788][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.690613][ T3429] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.697771][ T3429] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.716615][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.723816][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.932928][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.983503][ T5846] veth0_vlan: entered promiscuous mode [ 99.001155][ T5846] veth1_vlan: entered promiscuous mode [ 99.033714][ T5846] veth0_macvtap: entered promiscuous mode [ 99.044772][ T5846] veth1_macvtap: entered promiscuous mode [ 99.067301][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.084269][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.102425][ T5846] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.111988][ T5846] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.121729][ T5846] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.130479][ T5846] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.274898][ T5846] syz-executor (5846) used greatest stack depth: 20840 bytes left [ 99.308719][ T34] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.004842][ T5883] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 100.015164][ T5883] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 100.023194][ T5883] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 100.031617][ T5883] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 100.039461][ T5883] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 100.049038][ T5883] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 100.351462][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.359482][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.389645][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.398285][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/09/14 07:58:12 executed programs: 0 [ 101.051041][ T5106] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 101.059652][ T5106] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 101.068488][ T5106] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 101.078098][ T5106] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 101.085957][ T5106] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 101.094075][ T5106] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 101.264434][ T5898] chnl_net:caif_netlink_parms(): no params data found [ 101.340962][ T5898] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.348144][ T5898] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.355869][ T5898] bridge_slave_0: entered allmulticast mode [ 101.363749][ T5898] bridge_slave_0: entered promiscuous mode [ 101.372053][ T5898] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.379204][ T5898] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.386663][ T5898] bridge_slave_1: entered allmulticast mode [ 101.393940][ T5898] bridge_slave_1: entered promiscuous mode [ 101.428667][ T5898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.441393][ T5898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.477708][ T5898] team0: Port device team_slave_0 added [ 101.485891][ T5898] team0: Port device team_slave_1 added [ 101.515619][ T5898] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.523211][ T5898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.550916][ T5898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.563682][ T5898] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.570772][ T5898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.597064][ T5898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.642396][ T5898] hsr_slave_0: entered promiscuous mode [ 101.649168][ T5898] hsr_slave_1: entered promiscuous mode [ 101.655744][ T5898] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.663733][ T5898] Cannot create hsr debugfs directory [ 102.034928][ T34] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.121598][ T5106] Bluetooth: hci0: command tx timeout [ 104.272596][ T34] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.327249][ T34] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.201061][ T5106] Bluetooth: hci0: command tx timeout [ 105.258931][ T5898] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.273351][ T5898] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.293728][ T34] hsr_slave_0: left promiscuous mode [ 105.300265][ T34] hsr_slave_1: left promiscuous mode [ 105.306949][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.314570][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.324122][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.331835][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.339823][ T34] bridge_slave_1: left allmulticast mode [ 105.346152][ T34] bridge_slave_1: left promiscuous mode [ 105.352801][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.366294][ T34] bridge_slave_0: left allmulticast mode [ 105.373640][ T34] bridge_slave_0: left promiscuous mode [ 105.379430][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.411084][ T34] veth1_macvtap: left promiscuous mode [ 105.417048][ T34] veth0_macvtap: left promiscuous mode [ 105.423708][ T34] veth1_vlan: left promiscuous mode [ 105.429314][ T34] veth0_vlan: left promiscuous mode [ 105.860373][ T34] team0 (unregistering): Port device team_slave_1 removed [ 105.895512][ T34] team0 (unregistering): Port device team_slave_0 removed [ 105.929317][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.966211][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.358535][ T34] bond0 (unregistering): Released all slaves [ 106.497051][ T5898] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 106.508669][ T5898] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 106.630051][ T5898] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.656090][ T5898] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.672679][ T1020] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.679882][ T1020] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.695305][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.702582][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.946002][ T5898] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.994346][ T5898] veth0_vlan: entered promiscuous mode [ 107.026880][ T5898] veth1_vlan: entered promiscuous mode [ 107.076576][ T5898] veth0_macvtap: entered promiscuous mode [ 107.088004][ T5898] veth1_macvtap: entered promiscuous mode [ 107.119751][ T5898] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.142206][ T5898] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.155703][ T5898] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.164905][ T5898] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.174176][ T5898] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.183221][ T5898] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.269092][ T1020] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.281688][ T1020] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.295061][ T5106] Bluetooth: hci0: command tx timeout 2025/09/14 07:58:19 executed programs: 2 [ 107.341731][ T3429] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.349616][ T3429] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.431466][ T5947] netlink: 'syz.0.17': attribute type 10 has an invalid length. [ 107.454592][ T5947] team0: Port device wlan1 added [ 107.509977][ T5948] netlink: 'syz.0.18': attribute type 10 has an invalid length. [ 107.578064][ T5949] netlink: 'syz.0.19': attribute type 10 has an invalid length. [ 107.638560][ T5950] netlink: 'syz.0.20': attribute type 10 has an invalid length. [ 107.675931][ T5951] netlink: 'syz.0.21': attribute type 10 has an invalid length. [ 107.731691][ T5952] netlink: 'syz.0.22': attribute type 10 has an invalid length. [ 107.765696][ T5953] netlink: 'syz.0.23': attribute type 10 has an invalid length. [ 107.809142][ T5954] netlink: 'syz.0.24': attribute type 10 has an invalid length. [ 107.875620][ T5955] netlink: 'syz.0.25': attribute type 10 has an invalid length. [ 107.939854][ T5956] netlink: 'syz.0.26': attribute type 10 has an invalid length. [ 109.360671][ T5106] Bluetooth: hci0: command tx timeout 2025/09/14 07:58:24 executed programs: 189 [ 112.455576][ T6137] validate_nla: 180 callbacks suppressed [ 112.455589][ T6137] netlink: 'syz.0.207': attribute type 10 has an invalid length. [ 112.489429][ T6138] netlink: 'syz.0.208': attribute type 10 has an invalid length. [ 112.519452][ T6139] netlink: 'syz.0.209': attribute type 10 has an invalid length. [ 112.547249][ T6140] netlink: 'syz.0.210': attribute type 10 has an invalid length. [ 112.587923][ T6141] netlink: 'syz.0.211': attribute type 10 has an invalid length. [ 112.624598][ T6142] netlink: 'syz.0.212': attribute type 10 has an invalid length. [ 112.654353][ T6143] netlink: 'syz.0.213': attribute type 10 has an invalid length. [ 112.685381][ T6144] netlink: 'syz.0.214': attribute type 10 has an invalid length. [ 112.724046][ T6145] netlink: 'syz.0.215': attribute type 10 has an invalid length. [ 112.755712][ T6146] netlink: 'syz.0.216': attribute type 10 has an invalid length. 2025/09/14 07:58:29 executed programs: 399 [ 117.495264][ T6350] validate_nla: 200 callbacks suppressed [ 117.495280][ T6350] netlink: 'syz.0.417': attribute type 10 has an invalid length. [ 117.531708][ T6352] netlink: 'syz.0.418': attribute type 10 has an invalid length. [ 117.559912][ T6353] netlink: 'syz.0.419': attribute type 10 has an invalid length. [ 117.588598][ T6354] netlink: 'syz.0.420': attribute type 10 has an invalid length. [ 117.626496][ T6355] netlink: 'syz.0.421': attribute type 10 has an invalid length. [ 117.656186][ T6356] netlink: 'syz.0.422': attribute type 10 has an invalid length. [ 117.683210][ T6357] netlink: 'syz.0.423': attribute type 10 has an invalid length. [ 117.714693][ T6358] netlink: 'syz.0.424': attribute type 10 has an invalid length. [ 117.746489][ T6359] netlink: 'syz.0.425': attribute type 10 has an invalid length. [ 117.776605][ T6360] netlink: 'syz.0.426': attribute type 10 has an invalid length. [ 122.064139][ T5883] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 122.080907][ T5883] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 122.090922][ T5883] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 122.099065][ T5883] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 122.107360][ T5883] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 122.115525][ T5883] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 122.265340][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.327456][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.340457][ T6554] chnl_net:caif_netlink_parms(): no params data found [ 122.396951][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.435197][ T6554] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.442637][ T6554] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.449840][ T6554] bridge_slave_0: entered allmulticast mode [ 122.457601][ T6554] bridge_slave_0: entered promiscuous mode [ 122.476988][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.492853][ T6554] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.500166][ T6554] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.507822][ T6554] bridge_slave_1: entered allmulticast mode [ 122.514959][ T6554] bridge_slave_1: entered promiscuous mode [ 122.552170][ T6554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.564504][ T6554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.608085][ T6554] team0: Port device team_slave_0 added [ 122.616835][ T6554] team0: Port device team_slave_1 added [ 122.676076][ T6554] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.683434][ T6554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.710189][ T6554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.728082][ T6554] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.737663][ T6554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.764306][ T6554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.843387][ T6554] hsr_slave_0: entered promiscuous mode [ 122.853043][ T6554] hsr_slave_1: entered promiscuous mode [ 123.448368][ T6554] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 123.463655][ T6554] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 123.488369][ T6554] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 123.498465][ T6554] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 123.584122][ T12] [ 123.586516][ T12] ====================================================== [ 123.593572][ T12] WARNING: possible circular locking dependency detected [ 123.600629][ T12] syzkaller #0 Not tainted [ 123.605073][ T12] ------------------------------------------------------ [ 123.612124][ T12] kworker/u4:1/12 is trying to acquire lock: [ 123.618116][ T12] ffff88807f5c4d00 (team->team_lock_key#2){+.+.}-{3:3}, at: team_del_slave+0x32/0x1c0 [ 123.627726][ T12] [ 123.627726][ T12] but task is already holding lock: [ 123.635119][ T12] ffff888078208768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x292/0x680 [ 123.645490][ T12] [ 123.645490][ T12] which lock already depends on the new lock. [ 123.645490][ T12] [ 123.655932][ T12] [ 123.655932][ T12] the existing dependency chain (in reverse order) is: [ 123.664964][ T12] [ 123.664964][ T12] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 123.672770][ T12] __mutex_lock+0x129/0xcc0 [ 123.677849][ T12] ieee80211_open+0x144/0x200 [ 123.683082][ T12] __dev_open+0x2bc/0x430 [ 123.687953][ T12] dev_open+0xab/0x170 [ 123.692564][ T12] team_add_slave+0xae7/0x2660 [ 123.697857][ T12] do_setlink+0xe14/0x3fb0 [ 123.702826][ T12] rtnl_newlink+0x175b/0x2020 [ 123.708050][ T12] rtnetlink_rcv_msg+0x7c7/0xf10 [ 123.713520][ T12] netlink_rcv_skb+0x216/0x480 [ 123.718825][ T12] netlink_unicast+0x751/0x8d0 [ 123.724120][ T12] netlink_sendmsg+0x8c1/0xbe0 [ 123.729412][ T12] ____sys_sendmsg+0x5bf/0x950 [ 123.734708][ T12] ___sys_sendmsg+0x220/0x290 [ 123.739917][ T12] __se_sys_sendmsg+0x1a5/0x270 [ 123.745300][ T12] do_syscall_64+0x55/0xb0 [ 123.750250][ T12] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 123.756684][ T12] [ 123.756684][ T12] -> #0 (team->team_lock_key#2){+.+.}-{3:3}: [ 123.764868][ T12] __lock_acquire+0x2ddb/0x7c80 [ 123.770252][ T12] lock_acquire+0x197/0x410 [ 123.775287][ T12] __mutex_lock+0x129/0xcc0 [ 123.780329][ T12] team_del_slave+0x32/0x1c0 [ 123.785451][ T12] team_device_event+0x28d/0xa20 [ 123.790935][ T12] notifier_call_chain+0x197/0x390 [ 123.796580][ T12] unregister_netdevice_many_notify+0xf36/0x1810 [ 123.803444][ T12] unregister_netdevice_queue+0x324/0x360 [ 123.809711][ T12] _cfg80211_unregister_wdev+0x16b/0x580 [ 123.815876][ T12] ieee80211_remove_interfaces+0x496/0x680 [ 123.822213][ T12] ieee80211_unregister_hw+0x5d/0x2a0 [ 123.828116][ T12] mac80211_hwsim_del_radio+0x274/0x450 [ 123.834188][ T12] hwsim_exit_net+0x585/0x640 [ 123.839392][ T12] cleanup_net+0x6f4/0xb90 [ 123.844342][ T12] process_scheduled_works+0xa45/0x15b0 [ 123.850421][ T12] worker_thread+0xa55/0xfc0 [ 123.855552][ T12] kthread+0x2fa/0x390 [ 123.860151][ T12] ret_from_fork+0x48/0x80 [ 123.865101][ T12] ret_from_fork_asm+0x11/0x20 [ 123.870402][ T12] [ 123.870402][ T12] other info that might help us debug this: [ 123.870402][ T12] [ 123.880634][ T12] Possible unsafe locking scenario: [ 123.880634][ T12] [ 123.888085][ T12] CPU0 CPU1 [ 123.893453][ T12] ---- ---- [ 123.898819][ T12] lock(&rdev->wiphy.mtx); [ 123.903333][ T12] lock(team->team_lock_key#2); [ 123.910808][ T12] lock(&rdev->wiphy.mtx); [ 123.917838][ T12] lock(team->team_lock_key#2); [ 123.922795][ T12] [ 123.922795][ T12] *** DEADLOCK *** [ 123.922795][ T12] [ 123.930960][ T12] 5 locks held by kworker/u4:1/12: [ 123.936079][ T12] #0: ffff888017873938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 123.946985][ T12] #1: ffffc90000117d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 123.957533][ T12] #2: ffffffff8dfafad0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x136/0xb90 [ 123.966947][ T12] #3: ffffffff8dfbc908 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0 [ 123.976800][ T12] #4: ffff888078208768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x292/0x680 [ 123.987620][ T12] [ 123.987620][ T12] stack backtrace: [ 123.993542][ T12] CPU: 0 PID: 12 Comm: kworker/u4:1 Not tainted syzkaller #0 [ 124.000952][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 124.011025][ T12] Workqueue: netns cleanup_net [ 124.015824][ T12] Call Trace: [ 124.019115][ T12] [ 124.022061][ T12] dump_stack_lvl+0x16c/0x230 [ 124.026763][ T12] ? load_image+0x3b0/0x3b0 [ 124.031274][ T12] ? show_regs_print_info+0x20/0x20 [ 124.036485][ T12] ? print_circular_bug+0x12b/0x1a0 [ 124.041706][ T12] check_noncircular+0x2bd/0x3c0 [ 124.046663][ T12] ? print_deadlock_bug+0x5d0/0x5d0 [ 124.051875][ T12] ? lockdep_lock+0xe0/0x220 [ 124.056472][ T12] ? __lock_acquire+0x1334/0x7c80 [ 124.061515][ T12] ? _find_first_zero_bit+0xd3/0x100 [ 124.066818][ T12] __lock_acquire+0x2ddb/0x7c80 [ 124.071693][ T12] ? verify_lock_unused+0x140/0x140 [ 124.076911][ T12] ? verify_lock_unused+0x140/0x140 [ 124.082137][ T12] lock_acquire+0x197/0x410 [ 124.086653][ T12] ? team_del_slave+0x32/0x1c0 [ 124.091433][ T12] ? __might_sleep+0xe0/0xe0 [ 124.096040][ T12] ? read_lock_is_recursive+0x20/0x20 [ 124.101426][ T12] __mutex_lock+0x129/0xcc0 [ 124.105952][ T12] ? team_del_slave+0x32/0x1c0 [ 124.110727][ T12] ? __lock_acquire+0x7c80/0x7c80 [ 124.115763][ T12] ? rcu_is_watching+0x15/0xb0 [ 124.120537][ T12] ? trace_contention_end+0x39/0xe0 [ 124.125755][ T12] ? __mutex_lock+0x304/0xcc0 [ 124.130445][ T12] ? team_del_slave+0x32/0x1c0 [ 124.135220][ T12] ? mutex_lock_nested+0x20/0x20 [ 124.140172][ T12] ? bond_netdev_event+0xe1/0xef0 [ 124.145213][ T12] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 124.150859][ T12] ? bond_ipsec_offload_ok+0x410/0x410 [ 124.156341][ T12] team_del_slave+0x32/0x1c0 [ 124.160941][ T12] team_device_event+0x28d/0xa20 [ 124.165889][ T12] notifier_call_chain+0x197/0x390 [ 124.171016][ T12] unregister_netdevice_many_notify+0xf36/0x1810 [ 124.177360][ T12] ? lock_chain_count+0x20/0x20 [ 124.182229][ T12] ? unregister_netdevice_many+0x20/0x20 [ 124.187892][ T12] ? kernfs_remove_by_name_ns+0x117/0x150 [ 124.193631][ T12] ? __lock_acquire+0x7c80/0x7c80 [ 124.198675][ T12] unregister_netdevice_queue+0x324/0x360 [ 124.204410][ T12] ? list_netdevice+0x730/0x730 [ 124.209273][ T12] ? kernfs_remove_by_name_ns+0x117/0x150 [ 124.215004][ T12] _cfg80211_unregister_wdev+0x16b/0x580 [ 124.220664][ T12] ieee80211_remove_interfaces+0x496/0x680 [ 124.226498][ T12] ? ieee80211_do_stop+0x1db0/0x1db0 [ 124.231800][ T12] ? rcu_is_watching+0x15/0xb0 [ 124.236584][ T12] ieee80211_unregister_hw+0x5d/0x2a0 [ 124.241975][ T12] mac80211_hwsim_del_radio+0x274/0x450 [ 124.247537][ T12] ? rhashtable_remove_fast+0xbf0/0xbf0 [ 124.253098][ T12] hwsim_exit_net+0x585/0x640 [ 124.257791][ T12] ? hwsim_init_net+0x90/0x90 [ 124.262491][ T12] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 124.268308][ T12] cleanup_net+0x6f4/0xb90 [ 124.272744][ T12] ? ops_free_list+0x3b0/0x3b0 [ 124.277523][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 124.282734][ T12] ? process_scheduled_works+0x957/0x15b0 [ 124.288464][ T12] ? process_scheduled_works+0x957/0x15b0 [ 124.294199][ T12] process_scheduled_works+0xa45/0x15b0 [ 124.299770][ T12] ? assign_work+0x400/0x400 [ 124.304379][ T12] ? assign_work+0x39e/0x400 [ 124.308987][ T12] worker_thread+0xa55/0xfc0 [ 124.313598][ T12] kthread+0x2fa/0x390 [ 124.317674][ T12] ? pr_cont_work+0x560/0x560 [ 124.322362][ T12] ? kthread_blkcg+0xd0/0xd0 [ 124.326958][ T12] ret_from_fork+0x48/0x80 [ 124.331390][ T12] ? kthread_blkcg+0xd0/0xd0 [ 124.336004][ T12] ret_from_fork_asm+0x11/0x20 [ 124.340792][ T12] [ 124.345727][ T5883] Bluetooth: hci1: command tx timeout [ 124.353751][ T12] team0: Port device wlan1 removed [ 124.407815][ T6554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.455872][ T6554] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.469509][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.476734][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.506900][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.514107][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.545098][ T12] hsr_slave_0: left promiscuous mode [ 124.560386][ T12] hsr_slave_1: left promiscuous mode [ 124.569155][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.580675][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.589022][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.597078][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.605739][ T12] bridge_slave_1: left allmulticast mode [ 124.611467][ T12] bridge_slave_1: left promiscuous mode [ 124.617192][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.627299][ T12] bridge_slave_0: left allmulticast mode [ 124.633359][ T12] bridge_slave_0: left promiscuous mode [ 124.639103][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.662099][ T12] veth1_macvtap: left promiscuous mode [ 124.667687][ T12] veth0_macvtap: left promiscuous mode [ 124.674443][ T12] veth1_vlan: left promiscuous mode [ 124.679793][ T12] veth0_vlan: left promiscuous mode [ 124.885603][ T12] team0 (unregistering): Port device team_slave_1 removed [ 124.909063][ T12] team0 (unregistering): Port device team_slave_0 removed [ 124.932818][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.957733][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.058879][ T12] bond0 (unregistering): Released all slaves [ 125.148907][ T6554] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 125.159376][ T6554] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 125.314589][ T6554] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.355658][ T6554] veth0_vlan: entered promiscuous mode [ 125.367971][ T6554] veth1_vlan: entered promiscuous mode [ 125.395404][ T6554] veth0_macvtap: entered promiscuous mode [ 125.411194][ T6554] veth1_macvtap: entered promiscuous mode [ 125.429377][ T6554] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.443106][ T6554] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.458436][ T6554] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.467782][ T6554] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.476831][ T6554] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.487158][ T6554] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.518268][ T6554] ieee80211 phy7: Selected rate control algorithm 'minstrel_ht' [ 125.543198][ T1020] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.545388][ T6554] ieee80211 phy8: Selected rate control algorithm 'minstrel_ht' [ 125.557152][ T1020] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/09/14 07:58:37 executed programs: 602 [ 125.581993][ T1020] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.589883][ T1020] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.623411][ T6599] validate_nla: 190 callbacks suppressed [ 125.623424][ T6599] netlink: 'syz.0.617': attribute type 10 has an invalid length. [ 125.644245][ T6599] team0: Port device wlan1 added [ 125.667742][ T6600] netlink: 'syz.0.618': attribute type 10 has an invalid length. [ 125.693850][ T6601] netlink: 'syz.0.619': attribute type 10 has an invalid length. [ 125.713941][ T6602] netlink: 'syz.0.620': attribute type 10 has an invalid length. [ 125.733467][ T6603] netlink: 'syz.0.621': attribute type 10 has an invalid length. [ 125.756016][ T6604] netlink: 'syz.0.622': attribute type 10 has an invalid length. [ 125.775426][ T6605] netlink: 'syz.0.623': attribute type 10 has an invalid length. [ 125.795420][ T6606] netlink: 'syz.0.624': attribute type 10 has an invalid length. [ 125.816058][ T6607] netlink: 'syz.0.625': attribute type 10 has an invalid length. [ 125.835240][ T6608] netlink: 'syz.0.626': attribute type 10 has an invalid length. [ 126.401128][ T5106] Bluetooth: hci1: command tx timeout [ 128.480825][ T5106] Bluetooth: hci1: command tx timeout 2025/09/14 07:58:42 executed programs: 893 [ 130.561644][ T5106] Bluetooth: hci1: command tx timeout [ 130.639515][ T6893] validate_nla: 284 callbacks suppressed [ 130.639528][ T6893] netlink: 'syz.0.911': attribute type 10 has an invalid length. [ 130.663980][ T6894] netlink: 'syz.0.912': attribute type 10 has an invalid length. [ 130.683424][ T6895] netlink: 'syz.0.913': attribute type 10 has an invalid length. [ 130.701580][ T6896] netlink: 'syz.0.914': attribute type 10 has an invalid length. [ 130.726944][ T6897] netlink: 'syz.0.915': attribute type 10 has an invalid length. [ 130.746878][ T6898] netlink: 'syz.0.916': attribute type 10 has an invalid length. [ 130.766030][ T6899] netlink: 'syz.0.917': attribute type 10 has an invalid length. [ 130.786028][ T6900] netlink: 'syz.0.918': attribute type 10 has an invalid length. [ 130.804651][ T6901] netlink: 'syz.0.919': attribute type 10 has an invalid length. [ 130.824894][ T6902] netlink: 'syz.0.920': attribute type 10 has an invalid length. [ 133.123664][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.130025][ T1291] ieee802154 phy1 wpan1: encryption failed: -22