Warning: Permanently added '10.128.1.247' (ED25519) to the list of known hosts. 2025/09/14 07:51:55 parsed 1 programs [ 81.086492][ T5790] cgroup: Unknown subsys name 'net' [ 81.229634][ T5790] cgroup: Unknown subsys name 'rlimit' [ 81.817097][ T23] cfg80211: failed to load regulatory.db [ 82.624205][ T5790] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.253301][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 86.320334][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.327635][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.335281][ T5845] bridge_slave_0: entered allmulticast mode [ 86.342964][ T5845] bridge_slave_0: entered promiscuous mode [ 86.359906][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.367073][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.374591][ T5845] bridge_slave_1: entered allmulticast mode [ 86.381301][ T5845] bridge_slave_1: entered promiscuous mode [ 86.407252][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.427405][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.458950][ T5845] team0: Port device team_slave_0 added [ 86.478051][ T5845] team0: Port device team_slave_1 added [ 86.499264][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.506427][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.532370][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.545194][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.552157][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.579350][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.623742][ T5845] hsr_slave_0: entered promiscuous mode [ 86.630032][ T5845] hsr_slave_1: entered promiscuous mode [ 86.783251][ T5845] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.794133][ T5845] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.806425][ T5845] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.817639][ T5845] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.921380][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.987775][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.002065][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.009330][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.027496][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.034623][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.199153][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.247579][ T5845] veth0_vlan: entered promiscuous mode [ 87.258192][ T5845] veth1_vlan: entered promiscuous mode [ 87.283961][ T5845] veth0_macvtap: entered promiscuous mode [ 87.292744][ T5845] veth1_macvtap: entered promiscuous mode [ 87.319457][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.332748][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.351910][ T5845] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.361297][ T5845] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.370249][ T5845] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.379198][ T5845] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.528782][ T5866] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.539572][ T5866] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.548254][ T5866] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.557335][ T5866] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.565699][ T5866] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.573570][ T5866] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.858686][ T2953] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.868375][ T2953] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.911996][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.928778][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.937821][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/09/14 07:52:05 executed programs: 0 [ 88.972450][ T5099] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.980692][ T5099] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.991615][ T5099] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.000353][ T5099] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.010450][ T5099] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 89.017884][ T5099] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.151095][ T5892] chnl_net:caif_netlink_parms(): no params data found [ 89.215341][ T5892] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.222479][ T5892] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.230015][ T5892] bridge_slave_0: entered allmulticast mode [ 89.237148][ T5892] bridge_slave_0: entered promiscuous mode [ 89.245108][ T5892] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.252248][ T5892] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.259608][ T5892] bridge_slave_1: entered allmulticast mode [ 89.266983][ T5892] bridge_slave_1: entered promiscuous mode [ 89.291894][ T5892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.303058][ T5892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.333856][ T5892] team0: Port device team_slave_0 added [ 89.341749][ T5892] team0: Port device team_slave_1 added [ 89.363525][ T5892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.370532][ T5892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.397432][ T5892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.410249][ T5892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.417287][ T5892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.444405][ T5892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.478845][ T5892] hsr_slave_0: entered promiscuous mode [ 89.485414][ T5892] hsr_slave_1: entered promiscuous mode [ 89.491499][ T5892] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.499438][ T5892] Cannot create hsr debugfs directory [ 90.144511][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.084397][ T5099] Bluetooth: hci0: command tx timeout [ 92.464412][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.527178][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.167597][ T5099] Bluetooth: hci0: command tx timeout [ 93.411773][ T5892] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.433598][ T5892] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.442636][ T5892] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.452025][ T5892] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.472214][ T11] hsr_slave_0: left promiscuous mode [ 93.478449][ T11] hsr_slave_1: left promiscuous mode [ 93.485841][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.493509][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.502215][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.509932][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.517666][ T11] bridge_slave_1: left allmulticast mode [ 93.523310][ T11] bridge_slave_1: left promiscuous mode [ 93.529756][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.540092][ T11] bridge_slave_0: left allmulticast mode [ 93.546819][ T11] bridge_slave_0: left promiscuous mode [ 93.552810][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.573047][ T11] veth1_macvtap: left promiscuous mode [ 93.580420][ T11] veth0_macvtap: left promiscuous mode [ 93.586484][ T11] veth1_vlan: left promiscuous mode [ 93.592015][ T11] veth0_vlan: left promiscuous mode [ 93.924773][ T11] team0 (unregistering): Port device team_slave_1 removed [ 93.958737][ T11] team0 (unregistering): Port device team_slave_0 removed [ 93.988166][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.021134][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.305844][ T11] bond0 (unregistering): Released all slaves [ 94.425799][ T5892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.454550][ T5892] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.468879][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.476054][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.495570][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.502738][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.687494][ T5892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.741067][ T5892] veth0_vlan: entered promiscuous mode [ 94.757988][ T5892] veth1_vlan: entered promiscuous mode [ 94.787315][ T5892] veth0_macvtap: entered promiscuous mode [ 94.796083][ T5892] veth1_macvtap: entered promiscuous mode [ 94.813323][ T5892] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.828842][ T5892] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.839821][ T5892] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.848762][ T5892] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.858864][ T5892] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.868491][ T5892] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.987479][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.998921][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.026986][ T2953] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 2025/09/14 07:52:11 executed programs: 2 [ 95.035849][ T2953] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.087645][ T5937] netlink: 'syz.0.17': attribute type 10 has an invalid length. [ 95.109263][ T5937] team0: Port device wlan1 added [ 95.147533][ T5938] netlink: 'syz.0.18': attribute type 10 has an invalid length. [ 95.203149][ T5939] netlink: 'syz.0.19': attribute type 10 has an invalid length. [ 95.230075][ T5940] netlink: 'syz.0.20': attribute type 10 has an invalid length. [ 95.243930][ T5099] Bluetooth: hci0: command tx timeout [ 95.278676][ T5941] netlink: 'syz.0.21': attribute type 10 has an invalid length. [ 95.303224][ T5942] netlink: 'syz.0.22': attribute type 10 has an invalid length. [ 95.360263][ T5943] netlink: 'syz.0.23': attribute type 10 has an invalid length. [ 95.398499][ T5944] netlink: 'syz.0.24': attribute type 10 has an invalid length. [ 95.431056][ T5945] netlink: 'syz.0.25': attribute type 10 has an invalid length. [ 95.470941][ T5946] netlink: 'syz.0.26': attribute type 10 has an invalid length. [ 97.323627][ T5099] Bluetooth: hci0: command tx timeout 2025/09/14 07:52:16 executed programs: 221 [ 100.112940][ T6159] validate_nla: 212 callbacks suppressed [ 100.112954][ T6159] netlink: 'syz.0.239': attribute type 10 has an invalid length. [ 100.147472][ T6160] netlink: 'syz.0.240': attribute type 10 has an invalid length. [ 100.171132][ T6161] netlink: 'syz.0.241': attribute type 10 has an invalid length. [ 100.197353][ T6162] netlink: 'syz.0.242': attribute type 10 has an invalid length. [ 100.229294][ T6163] netlink: 'syz.0.243': attribute type 10 has an invalid length. [ 100.254454][ T6164] netlink: 'syz.0.244': attribute type 10 has an invalid length. [ 100.278669][ T6165] netlink: 'syz.0.245': attribute type 10 has an invalid length. [ 100.309416][ T6166] netlink: 'syz.0.246': attribute type 10 has an invalid length. [ 100.342404][ T6168] netlink: 'syz.0.247': attribute type 10 has an invalid length. [ 100.368521][ T6169] netlink: 'syz.0.248': attribute type 10 has an invalid length. 2025/09/14 07:52:21 executed programs: 451 [ 105.114029][ T6395] validate_nla: 220 callbacks suppressed [ 105.114043][ T6395] netlink: 'syz.0.469': attribute type 10 has an invalid length. [ 105.145930][ T6396] netlink: 'syz.0.470': attribute type 10 has an invalid length. [ 105.178931][ T6397] netlink: 'syz.0.471': attribute type 10 has an invalid length. [ 105.203182][ T6398] netlink: 'syz.0.472': attribute type 10 has an invalid length. [ 105.230812][ T6399] netlink: 'syz.0.473': attribute type 10 has an invalid length. [ 105.255760][ T6400] netlink: 'syz.0.474': attribute type 10 has an invalid length. [ 105.282168][ T6401] netlink: 'syz.0.475': attribute type 10 has an invalid length. [ 105.309057][ T6402] netlink: 'syz.0.476': attribute type 10 has an invalid length. [ 105.345831][ T6403] netlink: 'syz.0.477': attribute type 10 has an invalid length. [ 105.370052][ T6404] netlink: 'syz.0.478': attribute type 10 has an invalid length. [ 108.332176][ T5866] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 108.349501][ T5866] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 108.360544][ T5866] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 108.369351][ T5866] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 108.378651][ T5866] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 108.386261][ T5866] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 108.500801][ T6544] chnl_net:caif_netlink_parms(): no params data found [ 108.551681][ T6544] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.559145][ T6544] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.566790][ T6544] bridge_slave_0: entered allmulticast mode [ 108.574752][ T6544] bridge_slave_0: entered promiscuous mode [ 108.585384][ T6544] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.592559][ T6544] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.600617][ T6544] bridge_slave_1: entered allmulticast mode [ 108.608098][ T6544] bridge_slave_1: entered promiscuous mode [ 108.637698][ T2953] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.662842][ T6544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.675459][ T6544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.714596][ T2953] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.730368][ T6544] team0: Port device team_slave_0 added [ 108.738993][ T6544] team0: Port device team_slave_1 added [ 108.772425][ T2953] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.787771][ T6544] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.795431][ T6544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.821706][ T6544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.843328][ T2953] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.856717][ T6544] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.865397][ T6544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.891705][ T6544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.937153][ T6544] hsr_slave_0: entered promiscuous mode [ 108.948860][ T6544] hsr_slave_1: entered promiscuous mode [ 109.761818][ T6544] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 109.772186][ T6544] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 109.788100][ T6544] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 109.814848][ T6544] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 109.876555][ T2953] [ 109.878932][ T2953] ====================================================== [ 109.885951][ T2953] WARNING: possible circular locking dependency detected [ 109.892973][ T2953] syzkaller #0 Not tainted [ 109.897363][ T2953] ------------------------------------------------------ [ 109.904355][ T2953] kworker/u4:7/2953 is trying to acquire lock: [ 109.910479][ T2953] ffff888062204d00 (team->team_lock_key#2){+.+.}-{3:3}, at: team_del_slave+0x32/0x1c0 [ 109.920088][ T2953] [ 109.920088][ T2953] but task is already holding lock: [ 109.927444][ T2953] ffff88807d008768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x292/0x680 [ 109.937767][ T2953] [ 109.937767][ T2953] which lock already depends on the new lock. [ 109.937767][ T2953] [ 109.948148][ T2953] [ 109.948148][ T2953] the existing dependency chain (in reverse order) is: [ 109.957136][ T2953] [ 109.957136][ T2953] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 109.964858][ T2953] __mutex_lock+0x129/0xcc0 [ 109.969862][ T2953] ieee80211_open+0x144/0x200 [ 109.975044][ T2953] __dev_open+0x2bc/0x430 [ 109.979907][ T2953] dev_open+0xab/0x170 [ 109.984500][ T2953] team_add_slave+0xae7/0x2660 [ 109.989788][ T2953] do_setlink+0xe14/0x3fb0 [ 109.994719][ T2953] rtnl_newlink+0x175b/0x2020 [ 109.999915][ T2953] rtnetlink_rcv_msg+0x7c7/0xf10 [ 110.005369][ T2953] netlink_rcv_skb+0x216/0x480 [ 110.010644][ T2953] netlink_unicast+0x751/0x8d0 [ 110.015911][ T2953] netlink_sendmsg+0x8c1/0xbe0 [ 110.021188][ T2953] ____sys_sendmsg+0x5bf/0x950 [ 110.026459][ T2953] ___sys_sendmsg+0x220/0x290 [ 110.031693][ T2953] __se_sys_sendmsg+0x1a5/0x270 [ 110.037052][ T2953] do_syscall_64+0x55/0xb0 [ 110.041978][ T2953] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 110.048385][ T2953] [ 110.048385][ T2953] -> #0 (team->team_lock_key#2){+.+.}-{3:3}: [ 110.056536][ T2953] __lock_acquire+0x2ddb/0x7c80 [ 110.061892][ T2953] lock_acquire+0x197/0x410 [ 110.066902][ T2953] __mutex_lock+0x129/0xcc0 [ 110.071914][ T2953] team_del_slave+0x32/0x1c0 [ 110.077011][ T2953] team_device_event+0x28d/0xa20 [ 110.082451][ T2953] notifier_call_chain+0x197/0x390 [ 110.088067][ T2953] unregister_netdevice_many_notify+0xf36/0x1810 [ 110.094902][ T2953] unregister_netdevice_queue+0x324/0x360 [ 110.101129][ T2953] _cfg80211_unregister_wdev+0x16b/0x580 [ 110.107266][ T2953] ieee80211_remove_interfaces+0x496/0x680 [ 110.113577][ T2953] ieee80211_unregister_hw+0x5d/0x2a0 [ 110.119454][ T2953] mac80211_hwsim_del_radio+0x274/0x450 [ 110.125505][ T2953] hwsim_exit_net+0x585/0x640 [ 110.130687][ T2953] cleanup_net+0x6f4/0xb90 [ 110.135610][ T2953] process_scheduled_works+0xa45/0x15b0 [ 110.141661][ T2953] worker_thread+0xa55/0xfc0 [ 110.146754][ T2953] kthread+0x2fa/0x390 [ 110.151323][ T2953] ret_from_fork+0x48/0x80 [ 110.156243][ T2953] ret_from_fork_asm+0x11/0x20 [ 110.161513][ T2953] [ 110.161513][ T2953] other info that might help us debug this: [ 110.161513][ T2953] [ 110.171720][ T2953] Possible unsafe locking scenario: [ 110.171720][ T2953] [ 110.179150][ T2953] CPU0 CPU1 [ 110.184496][ T2953] ---- ---- [ 110.189841][ T2953] lock(&rdev->wiphy.mtx); [ 110.194331][ T2953] lock(team->team_lock_key#2); [ 110.201777][ T2953] lock(&rdev->wiphy.mtx); [ 110.208783][ T2953] lock(team->team_lock_key#2); [ 110.213708][ T2953] [ 110.213708][ T2953] *** DEADLOCK *** [ 110.213708][ T2953] [ 110.221829][ T2953] 5 locks held by kworker/u4:7/2953: [ 110.227095][ T2953] #0: ffff888017873938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 110.237970][ T2953] #1: ffffc9000c1e7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 110.248519][ T2953] #2: ffffffff8dfafad0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x136/0xb90 [ 110.257904][ T2953] #3: ffffffff8dfbc908 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0 [ 110.267721][ T2953] #4: ffff88807d008768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x292/0x680 [ 110.278492][ T2953] [ 110.278492][ T2953] stack backtrace: [ 110.284383][ T2953] CPU: 1 PID: 2953 Comm: kworker/u4:7 Not tainted syzkaller #0 [ 110.291922][ T2953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 110.301972][ T2953] Workqueue: netns cleanup_net [ 110.306743][ T2953] Call Trace: [ 110.310013][ T2953] [ 110.312942][ T2953] dump_stack_lvl+0x16c/0x230 [ 110.317610][ T2953] ? load_image+0x3b0/0x3b0 [ 110.322097][ T2953] ? show_regs_print_info+0x20/0x20 [ 110.327285][ T2953] ? print_circular_bug+0x12b/0x1a0 [ 110.332558][ T2953] check_noncircular+0x2bd/0x3c0 [ 110.337482][ T2953] ? print_deadlock_bug+0x5d0/0x5d0 [ 110.342665][ T2953] ? lockdep_lock+0xe0/0x220 [ 110.347241][ T2953] ? __lock_acquire+0x1334/0x7c80 [ 110.352250][ T2953] ? _find_first_zero_bit+0xd3/0x100 [ 110.357522][ T2953] __lock_acquire+0x2ddb/0x7c80 [ 110.362364][ T2953] ? verify_lock_unused+0x140/0x140 [ 110.367553][ T2953] ? verify_lock_unused+0x140/0x140 [ 110.372739][ T2953] lock_acquire+0x197/0x410 [ 110.377225][ T2953] ? team_del_slave+0x32/0x1c0 [ 110.381974][ T2953] ? __might_sleep+0xe0/0xe0 [ 110.386552][ T2953] ? read_lock_is_recursive+0x20/0x20 [ 110.391915][ T2953] __mutex_lock+0x129/0xcc0 [ 110.396402][ T2953] ? team_del_slave+0x32/0x1c0 [ 110.401159][ T2953] ? __lock_acquire+0x7c80/0x7c80 [ 110.406163][ T2953] ? rcu_is_watching+0x15/0xb0 [ 110.410912][ T2953] ? trace_contention_end+0x39/0xe0 [ 110.416098][ T2953] ? __mutex_lock+0x304/0xcc0 [ 110.420760][ T2953] ? team_del_slave+0x32/0x1c0 [ 110.425513][ T2953] ? mutex_lock_nested+0x20/0x20 [ 110.430436][ T2953] ? bond_netdev_event+0xe1/0xef0 [ 110.435460][ T2953] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 110.441100][ T2953] ? bond_ipsec_offload_ok+0x410/0x410 [ 110.446562][ T2953] team_del_slave+0x32/0x1c0 [ 110.451143][ T2953] team_device_event+0x28d/0xa20 [ 110.456093][ T2953] notifier_call_chain+0x197/0x390 [ 110.461191][ T2953] unregister_netdevice_many_notify+0xf36/0x1810 [ 110.467510][ T2953] ? lock_chain_count+0x20/0x20 [ 110.472348][ T2953] ? unregister_netdevice_many+0x20/0x20 [ 110.477968][ T2953] ? kernfs_remove_by_name_ns+0x117/0x150 [ 110.483674][ T2953] ? __lock_acquire+0x7c80/0x7c80 [ 110.488686][ T2953] unregister_netdevice_queue+0x324/0x360 [ 110.494399][ T2953] ? list_netdevice+0x730/0x730 [ 110.499253][ T2953] ? kernfs_remove_by_name_ns+0x117/0x150 [ 110.504976][ T2953] _cfg80211_unregister_wdev+0x16b/0x580 [ 110.510613][ T2953] ieee80211_remove_interfaces+0x496/0x680 [ 110.516418][ T2953] ? ieee80211_do_stop+0x1db0/0x1db0 [ 110.521690][ T2953] ? rcu_is_watching+0x15/0xb0 [ 110.526441][ T2953] ieee80211_unregister_hw+0x5d/0x2a0 [ 110.531831][ T2953] mac80211_hwsim_del_radio+0x274/0x450 [ 110.537364][ T2953] ? rhashtable_remove_fast+0xbf0/0xbf0 [ 110.542903][ T2953] hwsim_exit_net+0x585/0x640 [ 110.547569][ T2953] ? hwsim_init_net+0x90/0x90 [ 110.552230][ T2953] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 110.558020][ T2953] cleanup_net+0x6f4/0xb90 [ 110.562424][ T2953] ? ops_free_list+0x3b0/0x3b0 [ 110.567175][ T2953] ? _raw_spin_unlock_irq+0x23/0x50 [ 110.572354][ T2953] ? process_scheduled_works+0x957/0x15b0 [ 110.578060][ T2953] ? process_scheduled_works+0x957/0x15b0 [ 110.583762][ T2953] process_scheduled_works+0xa45/0x15b0 [ 110.589297][ T2953] ? assign_work+0x400/0x400 [ 110.593873][ T2953] ? assign_work+0x39e/0x400 [ 110.598445][ T2953] worker_thread+0xa55/0xfc0 [ 110.603016][ T2953] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 110.608892][ T2953] ? _raw_spin_unlock+0x40/0x40 [ 110.613737][ T2953] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 110.619616][ T2953] kthread+0x2fa/0x390 [ 110.623663][ T2953] ? pr_cont_work+0x560/0x560 [ 110.628321][ T2953] ? kthread_blkcg+0xd0/0xd0 [ 110.632890][ T2953] ret_from_fork+0x48/0x80 [ 110.637293][ T2953] ? kthread_blkcg+0xd0/0xd0 [ 110.641862][ T2953] ret_from_fork_asm+0x11/0x20 [ 110.646616][ T2953] [ 110.652489][ T5099] Bluetooth: hci1: command tx timeout [ 110.659339][ T2953] team0: Port device wlan1 removed [ 110.687297][ T6544] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.716317][ T6544] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.727162][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.734313][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.758514][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.765676][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.779573][ T2953] hsr_slave_0: left promiscuous mode [ 110.785826][ T2953] hsr_slave_1: left promiscuous mode [ 110.791430][ T2953] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.799225][ T2953] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.807447][ T2953] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.814920][ T2953] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.822376][ T2953] bridge_slave_1: left allmulticast mode [ 110.828130][ T2953] bridge_slave_1: left promiscuous mode [ 110.833848][ T2953] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.842057][ T2953] bridge_slave_0: left allmulticast mode [ 110.847959][ T2953] bridge_slave_0: left promiscuous mode [ 110.854050][ T2953] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.864615][ T2953] veth1_macvtap: left promiscuous mode [ 110.870103][ T2953] veth0_macvtap: left promiscuous mode [ 110.876040][ T2953] veth1_vlan: left promiscuous mode [ 110.881303][ T2953] veth0_vlan: left promiscuous mode [ 111.019399][ T2953] team0 (unregistering): Port device team_slave_1 removed [ 111.038958][ T2953] team0 (unregistering): Port device team_slave_0 removed [ 111.057542][ T2953] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.078912][ T2953] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.161987][ T2953] bond0 (unregistering): Released all slaves [ 111.328589][ T6544] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.356502][ T6544] veth0_vlan: entered promiscuous mode [ 111.369785][ T6544] veth1_vlan: entered promiscuous mode [ 111.391810][ T6544] veth0_macvtap: entered promiscuous mode [ 111.400247][ T6544] veth1_macvtap: entered promiscuous mode [ 111.412610][ T6544] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.426017][ T6544] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.444242][ T6544] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.452985][ T6544] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.461902][ T6544] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.470688][ T6544] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.499759][ T6544] ieee80211 phy7: Selected rate control algorithm 'minstrel_ht' [ 111.519490][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.521052][ T6544] ieee80211 phy8: Selected rate control algorithm 'minstrel_ht' [ 111.532000][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/09/14 07:52:27 executed programs: 602 [ 111.551726][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.559745][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.590618][ T6589] validate_nla: 138 callbacks suppressed [ 111.590632][ T6589] netlink: 'syz.0.617': attribute type 10 has an invalid length. [ 111.610728][ T6589] team0: Port device wlan1 added [ 111.634254][ T6590] netlink: 'syz.0.618': attribute type 10 has an invalid length. [ 111.658528][ T6591] netlink: 'syz.0.619': attribute type 10 has an invalid length. [ 111.688161][ T6592] netlink: 'syz.0.620': attribute type 10 has an invalid length. [ 111.710313][ T6593] netlink: 'syz.0.621': attribute type 10 has an invalid length. [ 111.730263][ T6594] netlink: 'syz.0.622': attribute type 10 has an invalid length. [ 111.751152][ T6595] netlink: 'syz.0.623': attribute type 10 has an invalid length. [ 111.772451][ T6596] netlink: 'syz.0.624': attribute type 10 has an invalid length. [ 111.799475][ T6597] netlink: 'syz.0.625': attribute type 10 has an invalid length. [ 111.821989][ T6598] netlink: 'syz.0.626': attribute type 10 has an invalid length. [ 112.687523][ T5099] Bluetooth: hci1: command tx timeout [ 114.763622][ T5099] Bluetooth: hci1: command tx timeout 2025/09/14 07:52:32 executed programs: 888 [ 116.598872][ T6878] validate_nla: 278 callbacks suppressed [ 116.598883][ T6878] netlink: 'syz.0.905': attribute type 10 has an invalid length. [ 116.625193][ T6879] netlink: 'syz.0.906': attribute type 10 has an invalid length. [ 116.643089][ T6880] netlink: 'syz.0.907': attribute type 10 has an invalid length. [ 116.670398][ T6881] netlink: 'syz.0.908': attribute type 10 has an invalid length. [ 116.691844][ T6882] netlink: 'syz.0.909': attribute type 10 has an invalid length. [ 116.710985][ T6883] netlink: 'syz.0.910': attribute type 10 has an invalid length. [ 116.739158][ T6884] netlink: 'syz.0.911': attribute type 10 has an invalid length. [ 116.757276][ T6885] netlink: 'syz.0.912': attribute type 10 has an invalid length. [ 116.775203][ T6886] netlink: 'syz.0.913': attribute type 10 has an invalid length. [ 116.808232][ T6887] netlink: 'syz.0.914': attribute type 10 has an invalid length. [ 116.843588][ T5099] Bluetooth: hci1: command tx timeout