Warning: Permanently added '10.128.1.133' (ED25519) to the list of known hosts. 2025/09/28 06:44:04 parsed 1 programs [ 88.928767][ T5796] cgroup: Unknown subsys name 'net' [ 89.034378][ T5796] cgroup: Unknown subsys name 'rlimit' [ 91.042522][ T5796] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.517708][ T9] cfg80211: failed to load regulatory.db [ 94.017698][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 94.044312][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 94.055453][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 94.064808][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 94.084333][ T5834] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 94.093241][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.407421][ T5874] chnl_net:caif_netlink_parms(): no params data found [ 96.499678][ T5874] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.507855][ T5874] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.515347][ T5874] bridge_slave_0: entered allmulticast mode [ 96.522459][ T5874] bridge_slave_0: entered promiscuous mode [ 96.533332][ T5874] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.540601][ T5874] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.549020][ T5874] bridge_slave_1: entered allmulticast mode [ 96.556333][ T5874] bridge_slave_1: entered promiscuous mode [ 96.600817][ T5874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.612827][ T5874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.661391][ T5874] team0: Port device team_slave_0 added [ 96.670054][ T5874] team0: Port device team_slave_1 added [ 96.699861][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.706986][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.733089][ T5874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.759499][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.767154][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.794027][ T5874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.856742][ T5874] hsr_slave_0: entered promiscuous mode [ 96.863228][ T5874] hsr_slave_1: entered promiscuous mode [ 97.099112][ T5874] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.116335][ T5874] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.130655][ T5874] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.144717][ T5874] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.190337][ T5874] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.197857][ T5874] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.206781][ T5874] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.214085][ T5874] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.310477][ T5874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.340972][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.350331][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.373926][ T5874] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.388759][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.396283][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.414239][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.421527][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.640286][ T5874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.688240][ T5874] veth0_vlan: entered promiscuous mode [ 97.704635][ T5874] veth1_vlan: entered promiscuous mode [ 97.740892][ T5874] veth0_macvtap: entered promiscuous mode [ 97.751725][ T5874] veth1_macvtap: entered promiscuous mode [ 97.773098][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.791636][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.806721][ T5874] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.816014][ T5874] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.824766][ T5874] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.834159][ T5874] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.004311][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.118550][ T2963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.127077][ T2963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.163244][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.173781][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/09/28 06:44:16 executed programs: 0 [ 98.881836][ T5107] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.892243][ T5107] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 98.902022][ T5107] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 98.911426][ T5107] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.931507][ T5107] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 98.939391][ T5107] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 99.132934][ T5904] chnl_net:caif_netlink_parms(): no params data found [ 99.218359][ T5904] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.225763][ T5904] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.233088][ T5904] bridge_slave_0: entered allmulticast mode [ 99.240645][ T5904] bridge_slave_0: entered promiscuous mode [ 99.250101][ T5904] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.257635][ T5904] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.265634][ T5904] bridge_slave_1: entered allmulticast mode [ 99.273211][ T5904] bridge_slave_1: entered promiscuous mode [ 99.313353][ T5904] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.326574][ T5904] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.369713][ T5904] team0: Port device team_slave_0 added [ 99.380084][ T5904] team0: Port device team_slave_1 added [ 99.422112][ T5904] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.429746][ T5904] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.456614][ T5904] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.470799][ T5904] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.477970][ T5904] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.507796][ T5904] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.562553][ T5904] hsr_slave_0: entered promiscuous mode [ 99.569943][ T5904] hsr_slave_1: entered promiscuous mode [ 99.576578][ T5904] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.584500][ T5904] Cannot create hsr debugfs directory [ 100.533129][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.996487][ T5834] Bluetooth: hci0: command tx timeout [ 102.708245][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.779913][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.076159][ T5834] Bluetooth: hci0: command tx timeout [ 103.781119][ T5904] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 103.794632][ T5904] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 103.809641][ T5904] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 103.824556][ T5904] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 103.848916][ T11] hsr_slave_0: left promiscuous mode [ 103.857326][ T11] hsr_slave_1: left promiscuous mode [ 103.863769][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.871856][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.883043][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.892414][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.902515][ T11] bridge_slave_1: left allmulticast mode [ 103.908697][ T11] bridge_slave_1: left promiscuous mode [ 103.915873][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.930739][ T11] bridge_slave_0: left allmulticast mode [ 103.938338][ T11] bridge_slave_0: left promiscuous mode [ 103.944210][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.983202][ T11] veth1_macvtap: left promiscuous mode [ 103.991685][ T11] veth0_macvtap: left promiscuous mode [ 103.997563][ T11] veth1_vlan: left promiscuous mode [ 104.003199][ T11] veth0_vlan: left promiscuous mode [ 104.524514][ T11] team0 (unregistering): Port device team_slave_1 removed [ 104.567935][ T11] team0 (unregistering): Port device team_slave_0 removed [ 104.610319][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.652201][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.096459][ T11] bond0 (unregistering): Released all slaves [ 105.155205][ T5834] Bluetooth: hci0: command tx timeout [ 105.338975][ T5904] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.382973][ T5904] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.400095][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.407364][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.427095][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.434556][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.690574][ T5904] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.749482][ T5904] veth0_vlan: entered promiscuous mode [ 105.762763][ T5904] veth1_vlan: entered promiscuous mode [ 105.802169][ T5904] veth0_macvtap: entered promiscuous mode [ 105.818273][ T5904] veth1_macvtap: entered promiscuous mode [ 105.850860][ T5904] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.867865][ T5904] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.880850][ T5904] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.890215][ T5904] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.899196][ T5904] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.909201][ T5904] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.997277][ T2963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.006597][ T2963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/09/28 06:44:24 executed programs: 2 [ 106.054132][ T2988] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.062767][ T2988] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.137947][ T5953] netlink: 'syz.0.17': attribute type 10 has an invalid length. [ 106.163921][ T5953] team0: Port device wlan1 added [ 106.214224][ T5954] netlink: 'syz.0.18': attribute type 10 has an invalid length. [ 106.262406][ T5955] netlink: 'syz.0.19': attribute type 10 has an invalid length. [ 106.330158][ T5956] netlink: 'syz.0.20': attribute type 10 has an invalid length. [ 106.371844][ T5957] netlink: 'syz.0.21': attribute type 10 has an invalid length. [ 106.444617][ T5958] netlink: 'syz.0.22': attribute type 10 has an invalid length. [ 106.478340][ T5959] netlink: 'syz.0.23': attribute type 10 has an invalid length. [ 106.524447][ T5960] netlink: 'syz.0.24': attribute type 10 has an invalid length. [ 106.573395][ T5961] netlink: 'syz.0.25': attribute type 10 has an invalid length. [ 106.617757][ T5962] netlink: 'syz.0.26': attribute type 10 has an invalid length. [ 107.236240][ T5834] Bluetooth: hci0: command tx timeout 2025/09/28 06:44:29 executed programs: 192 [ 111.161314][ T6145] validate_nla: 182 callbacks suppressed [ 111.161331][ T6145] netlink: 'syz.0.209': attribute type 10 has an invalid length. [ 111.196933][ T6146] netlink: 'syz.0.210': attribute type 10 has an invalid length. [ 111.226157][ T6147] netlink: 'syz.0.211': attribute type 10 has an invalid length. [ 111.270819][ T6148] netlink: 'syz.0.212': attribute type 10 has an invalid length. [ 111.312172][ T6149] netlink: 'syz.0.213': attribute type 10 has an invalid length. [ 111.344303][ T6150] netlink: 'syz.0.214': attribute type 10 has an invalid length. [ 111.371936][ T6151] netlink: 'syz.0.215': attribute type 10 has an invalid length. [ 111.403811][ T6152] netlink: 'syz.0.216': attribute type 10 has an invalid length. [ 111.431753][ T6153] netlink: 'syz.0.217': attribute type 10 has an invalid length. [ 111.463777][ T6154] netlink: 'syz.0.218': attribute type 10 has an invalid length. 2025/09/28 06:44:34 executed programs: 402 [ 116.189372][ T6355] validate_nla: 200 callbacks suppressed [ 116.189392][ T6355] netlink: 'syz.0.419': attribute type 10 has an invalid length. [ 116.227936][ T6356] netlink: 'syz.0.420': attribute type 10 has an invalid length. [ 116.269198][ T6357] netlink: 'syz.0.421': attribute type 10 has an invalid length. [ 116.301195][ T6358] netlink: 'syz.0.422': attribute type 10 has an invalid length. [ 116.335251][ T6359] netlink: 'syz.0.423': attribute type 10 has an invalid length. [ 116.368722][ T6360] netlink: 'syz.0.424': attribute type 10 has an invalid length. [ 116.397110][ T6361] netlink: 'syz.0.425': attribute type 10 has an invalid length. [ 116.433909][ T6362] netlink: 'syz.0.426': attribute type 10 has an invalid length. [ 116.464564][ T6363] netlink: 'syz.0.427': attribute type 10 has an invalid length. [ 116.494585][ T6364] netlink: 'syz.0.428': attribute type 10 has an invalid length. [ 120.610624][ T5107] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 120.632422][ T5107] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 120.641496][ T5107] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 120.650436][ T5107] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 120.658769][ T5107] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 120.668751][ T5107] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 120.852692][ T6554] chnl_net:caif_netlink_parms(): no params data found [ 120.881629][ T2963] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.953971][ T2963] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.993589][ T6554] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.001158][ T6554] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.008589][ T6554] bridge_slave_0: entered allmulticast mode [ 121.016127][ T6554] bridge_slave_0: entered promiscuous mode [ 121.038490][ T2963] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.053231][ T6554] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.061655][ T6554] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.069305][ T6554] bridge_slave_1: entered allmulticast mode [ 121.079793][ T6554] bridge_slave_1: entered promiscuous mode [ 121.102641][ T2963] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.144122][ T6554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.157773][ T6554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.205147][ T6554] team0: Port device team_slave_0 added [ 121.214271][ T6554] team0: Port device team_slave_1 added [ 121.248644][ T6554] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.256003][ T6554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.282998][ T6554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.326022][ T6554] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.333059][ T6554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.359500][ T6554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.454448][ T6554] hsr_slave_0: entered promiscuous mode [ 121.462382][ T6554] hsr_slave_1: entered promiscuous mode [ 122.176335][ T6554] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 122.187289][ T6554] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 122.198775][ T6554] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 122.209641][ T6554] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 122.238370][ T2963] [ 122.240804][ T2963] ====================================================== [ 122.248004][ T2963] WARNING: possible circular locking dependency detected [ 122.255043][ T2963] syzkaller #0 Not tainted [ 122.259562][ T2963] ------------------------------------------------------ [ 122.266704][ T2963] kworker/u4:9/2963 is trying to acquire lock: [ 122.272855][ T2963] ffff88802dce4d00 (team->team_lock_key#2){+.+.}-{3:3}, at: team_del_slave+0x32/0x1c0 [ 122.282567][ T2963] [ 122.282567][ T2963] but task is already holding lock: [ 122.289976][ T2963] ffff88802c938768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x292/0x680 [ 122.300392][ T2963] [ 122.300392][ T2963] which lock already depends on the new lock. [ 122.300392][ T2963] [ 122.310832][ T2963] [ 122.310832][ T2963] the existing dependency chain (in reverse order) is: [ 122.319955][ T2963] [ 122.319955][ T2963] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 122.327717][ T2963] __mutex_lock+0x129/0xcc0 [ 122.332858][ T2963] ieee80211_open+0x144/0x200 [ 122.338076][ T2963] __dev_open+0x2bc/0x430 [ 122.342949][ T2963] dev_open+0xab/0x170 [ 122.347560][ T2963] team_add_slave+0xae7/0x2660 [ 122.352854][ T2963] do_setlink+0xe14/0x3fb0 [ 122.357810][ T2963] rtnl_newlink+0x175b/0x2020 [ 122.363059][ T2963] rtnetlink_rcv_msg+0x7c7/0xf10 [ 122.368720][ T2963] netlink_rcv_skb+0x216/0x480 [ 122.374127][ T2963] netlink_unicast+0x751/0x8d0 [ 122.379454][ T2963] netlink_sendmsg+0x8c1/0xbe0 [ 122.384866][ T2963] ____sys_sendmsg+0x5bf/0x950 [ 122.390196][ T2963] ___sys_sendmsg+0x220/0x290 [ 122.395417][ T2963] __se_sys_sendmsg+0x1a5/0x270 [ 122.400806][ T2963] do_syscall_64+0x55/0xb0 [ 122.405766][ T2963] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 122.412293][ T2963] [ 122.412293][ T2963] -> #0 (team->team_lock_key#2){+.+.}-{3:3}: [ 122.420580][ T2963] __lock_acquire+0x2ddb/0x7c80 [ 122.425968][ T2963] lock_acquire+0x197/0x410 [ 122.431003][ T2963] __mutex_lock+0x129/0xcc0 [ 122.436086][ T2963] team_del_slave+0x32/0x1c0 [ 122.441229][ T2963] team_device_event+0x28d/0xa20 [ 122.446751][ T2963] notifier_call_chain+0x197/0x390 [ 122.452510][ T2963] unregister_netdevice_many_notify+0xf36/0x1810 [ 122.459377][ T2963] unregister_netdevice_queue+0x324/0x360 [ 122.465656][ T2963] _cfg80211_unregister_wdev+0x16b/0x580 [ 122.471843][ T2963] ieee80211_remove_interfaces+0x496/0x680 [ 122.478185][ T2963] ieee80211_unregister_hw+0x5d/0x2a0 [ 122.484098][ T2963] mac80211_hwsim_del_radio+0x274/0x450 [ 122.490176][ T2963] hwsim_exit_net+0x585/0x640 [ 122.495397][ T2963] cleanup_net+0x6f4/0xb90 [ 122.500347][ T2963] process_scheduled_works+0xa45/0x15b0 [ 122.506428][ T2963] worker_thread+0xa55/0xfc0 [ 122.511555][ T2963] kthread+0x2fa/0x390 [ 122.516159][ T2963] ret_from_fork+0x48/0x80 [ 122.521109][ T2963] ret_from_fork_asm+0x11/0x20 [ 122.526410][ T2963] [ 122.526410][ T2963] other info that might help us debug this: [ 122.526410][ T2963] [ 122.536841][ T2963] Possible unsafe locking scenario: [ 122.536841][ T2963] [ 122.544298][ T2963] CPU0 CPU1 [ 122.549679][ T2963] ---- ---- [ 122.555082][ T2963] lock(&rdev->wiphy.mtx); [ 122.559611][ T2963] lock(team->team_lock_key#2); [ 122.567177][ T2963] lock(&rdev->wiphy.mtx); [ 122.574218][ T2963] lock(team->team_lock_key#2); [ 122.579172][ T2963] [ 122.579172][ T2963] *** DEADLOCK *** [ 122.579172][ T2963] [ 122.587447][ T2963] 5 locks held by kworker/u4:9/2963: [ 122.592739][ T2963] #0: ffff888017873938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 122.603732][ T2963] #1: ffffc9000c007d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 122.614455][ T2963] #2: ffffffff8dfae3d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x136/0xb90 [ 122.623889][ T2963] #3: ffffffff8dfbb208 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0 [ 122.633773][ T2963] #4: ffff88802c938768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x292/0x680 [ 122.644685][ T2963] [ 122.644685][ T2963] stack backtrace: [ 122.650741][ T2963] CPU: 1 PID: 2963 Comm: kworker/u4:9 Not tainted syzkaller #0 [ 122.658296][ T2963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 122.668401][ T2963] Workqueue: netns cleanup_net [ 122.673322][ T2963] Call Trace: [ 122.676614][ T2963] [ 122.679565][ T2963] dump_stack_lvl+0x16c/0x230 [ 122.684286][ T2963] ? load_image+0x3b0/0x3b0 [ 122.688805][ T2963] ? show_regs_print_info+0x20/0x20 [ 122.694022][ T2963] ? print_circular_bug+0x12b/0x1a0 [ 122.699323][ T2963] check_noncircular+0x2bd/0x3c0 [ 122.704276][ T2963] ? print_deadlock_bug+0x5d0/0x5d0 [ 122.709667][ T2963] ? lockdep_lock+0xe0/0x220 [ 122.714277][ T2963] ? __lock_acquire+0x1334/0x7c80 [ 122.719326][ T2963] ? _find_first_zero_bit+0xd3/0x100 [ 122.724663][ T2963] __lock_acquire+0x2ddb/0x7c80 [ 122.729569][ T2963] ? verify_lock_unused+0x140/0x140 [ 122.734798][ T2963] ? verify_lock_unused+0x140/0x140 [ 122.740103][ T2963] lock_acquire+0x197/0x410 [ 122.744619][ T2963] ? team_del_slave+0x32/0x1c0 [ 122.749512][ T2963] ? __might_sleep+0xe0/0xe0 [ 122.754123][ T2963] ? read_lock_is_recursive+0x20/0x20 [ 122.759516][ T2963] __mutex_lock+0x129/0xcc0 [ 122.764042][ T2963] ? team_del_slave+0x32/0x1c0 [ 122.768815][ T2963] ? __lock_acquire+0x7c80/0x7c80 [ 122.773853][ T2963] ? rcu_is_watching+0x15/0xb0 [ 122.778632][ T2963] ? trace_contention_end+0x39/0xe0 [ 122.783859][ T2963] ? __mutex_lock+0x304/0xcc0 [ 122.788566][ T2963] ? team_del_slave+0x32/0x1c0 [ 122.793443][ T2963] ? mutex_lock_nested+0x20/0x20 [ 122.798414][ T2963] ? bond_netdev_event+0xe1/0xef0 [ 122.803463][ T2963] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 122.809121][ T2963] ? bond_ipsec_offload_ok+0x410/0x410 [ 122.814607][ T2963] team_del_slave+0x32/0x1c0 [ 122.819212][ T2963] team_device_event+0x28d/0xa20 [ 122.824167][ T2963] notifier_call_chain+0x197/0x390 [ 122.829301][ T2963] unregister_netdevice_many_notify+0xf36/0x1810 [ 122.835684][ T2963] ? lock_chain_count+0x20/0x20 [ 122.840570][ T2963] ? unregister_netdevice_many+0x20/0x20 [ 122.846227][ T2963] ? kernfs_remove_by_name_ns+0x117/0x150 [ 122.851971][ T2963] ? __lock_acquire+0x7c80/0x7c80 [ 122.857025][ T2963] unregister_netdevice_queue+0x324/0x360 [ 122.862773][ T2963] ? list_netdevice+0x730/0x730 [ 122.867649][ T2963] ? kernfs_remove_by_name_ns+0x117/0x150 [ 122.873407][ T2963] _cfg80211_unregister_wdev+0x16b/0x580 [ 122.879064][ T2963] ieee80211_remove_interfaces+0x496/0x680 [ 122.884921][ T2963] ? ieee80211_do_stop+0x1db0/0x1db0 [ 122.890315][ T2963] ? rcu_is_watching+0x15/0xb0 [ 122.895107][ T2963] ieee80211_unregister_hw+0x5d/0x2a0 [ 122.900694][ T2963] mac80211_hwsim_del_radio+0x274/0x450 [ 122.906260][ T2963] ? rhashtable_remove_fast+0xbf0/0xbf0 [ 122.911828][ T2963] hwsim_exit_net+0x585/0x640 [ 122.916550][ T2963] ? hwsim_init_net+0x90/0x90 [ 122.921240][ T2963] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 122.927057][ T2963] cleanup_net+0x6f4/0xb90 [ 122.931553][ T2963] ? ops_free_list+0x3b0/0x3b0 [ 122.936425][ T2963] ? _raw_spin_unlock_irq+0x23/0x50 [ 122.941635][ T2963] ? process_scheduled_works+0x957/0x15b0 [ 122.947376][ T2963] ? process_scheduled_works+0x957/0x15b0 [ 122.953113][ T2963] process_scheduled_works+0xa45/0x15b0 [ 122.958711][ T2963] ? assign_work+0x400/0x400 [ 122.963448][ T2963] ? assign_work+0x39e/0x400 [ 122.968086][ T2963] worker_thread+0xa55/0xfc0 [ 122.972722][ T2963] kthread+0x2fa/0x390 [ 122.976800][ T2963] ? pr_cont_work+0x560/0x560 [ 122.981490][ T2963] ? kthread_blkcg+0xd0/0xd0 [ 122.986088][ T2963] ret_from_fork+0x48/0x80 [ 122.990519][ T2963] ? kthread_blkcg+0xd0/0xd0 [ 122.995133][ T2963] ret_from_fork_asm+0x11/0x20 [ 122.999932][ T2963] [ 123.006956][ T5107] Bluetooth: hci1: command tx timeout [ 123.014819][ T2963] team0: Port device wlan1 removed [ 123.146600][ T6554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.183561][ T6554] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.198882][ T2963] hsr_slave_0: left promiscuous mode [ 123.205440][ T2963] hsr_slave_1: left promiscuous mode [ 123.211631][ T2963] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.222468][ T2963] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.231166][ T2963] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.239916][ T2963] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.249111][ T2963] bridge_slave_1: left allmulticast mode [ 123.254821][ T2963] bridge_slave_1: left promiscuous mode [ 123.261814][ T2963] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.271653][ T2963] bridge_slave_0: left allmulticast mode [ 123.278700][ T2963] bridge_slave_0: left promiscuous mode [ 123.284560][ T2963] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.298936][ T2963] veth1_macvtap: left promiscuous mode [ 123.304574][ T2963] veth0_macvtap: left promiscuous mode [ 123.310781][ T2963] veth1_vlan: left promiscuous mode [ 123.317727][ T2963] veth0_vlan: left promiscuous mode [ 123.599724][ T2963] team0 (unregistering): Port device team_slave_1 removed [ 123.627685][ T2963] team0 (unregistering): Port device team_slave_0 removed [ 123.651439][ T2963] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 123.681496][ T2963] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 123.774613][ T2963] bond0 (unregistering): Released all slaves [ 123.828923][ T1323] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.836191][ T1323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.848640][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.855924][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.057188][ T6554] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.091963][ T6554] veth0_vlan: entered promiscuous mode [ 124.102371][ T6554] veth1_vlan: entered promiscuous mode [ 124.140019][ T6554] veth0_macvtap: entered promiscuous mode [ 124.150603][ T6554] veth1_macvtap: entered promiscuous mode [ 124.168245][ T6554] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.180077][ T6554] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.190959][ T6554] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.200054][ T6554] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.209416][ T6554] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.218277][ T6554] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.253688][ T6554] ieee80211 phy7: Selected rate control algorithm 'minstrel_ht' [ 124.276899][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.278961][ T6554] ieee80211 phy8: Selected rate control algorithm 'minstrel_ht' [ 124.293060][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/09/28 06:44:42 executed programs: 602 [ 124.317316][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.326967][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.361487][ T6604] validate_nla: 188 callbacks suppressed [ 124.361504][ T6604] netlink: 'syz.0.617': attribute type 10 has an invalid length. [ 124.387282][ T6604] team0: Port device wlan1 added [ 124.409058][ T6606] netlink: 'syz.0.618': attribute type 10 has an invalid length. [ 124.436548][ T6607] netlink: 'syz.0.619': attribute type 10 has an invalid length. [ 124.457696][ T6608] netlink: 'syz.0.620': attribute type 10 has an invalid length. [ 124.478781][ T6609] netlink: 'syz.0.621': attribute type 10 has an invalid length. [ 124.500637][ T6610] netlink: 'syz.0.622': attribute type 10 has an invalid length. [ 124.519192][ T6611] netlink: 'syz.0.623': attribute type 10 has an invalid length. [ 124.537990][ T6612] netlink: 'syz.0.624': attribute type 10 has an invalid length. [ 124.561106][ T6613] netlink: 'syz.0.625': attribute type 10 has an invalid length. [ 124.580497][ T6614] netlink: 'syz.0.626': attribute type 10 has an invalid length. [ 125.075460][ T5107] Bluetooth: hci1: command tx timeout [ 127.155114][ T5107] Bluetooth: hci1: command tx timeout [ 129.245417][ T5107] Bluetooth: hci1: command tx timeout 2025/09/28 06:44:47 executed programs: 881 [ 129.375922][ T6887] validate_nla: 272 callbacks suppressed [ 129.375936][ T6887] netlink: 'syz.0.899': attribute type 10 has an invalid length. [ 129.401019][ T6888] netlink: 'syz.0.900': attribute type 10 has an invalid length. [ 129.432381][ T6889] netlink: 'syz.0.901': attribute type 10 has an invalid length. [ 129.450427][ T6890] netlink: 'syz.0.902': attribute type 10 has an invalid length. [ 129.468823][ T6891] netlink: 'syz.0.903': attribute type 10 has an invalid length. [ 129.491159][ T6892] netlink: 'syz.0.904': attribute type 10 has an invalid length. [ 129.509926][ T6893] netlink: 'syz.0.905': attribute type 10 has an invalid length. [ 129.529171][ T6894] netlink: 'syz.0.906': attribute type 10 has an invalid length. [ 129.550675][ T6895] netlink: 'syz.0.907': attribute type 10 has an invalid length. [ 129.571249][ T6896] netlink: 'syz.0.908': attribute type 10 has an invalid length.