Warning: Permanently added '10.128.1.99' (ED25519) to the list of known hosts. 2025/11/14 05:53:49 parsed 1 programs [ 72.621657][ T5791] cgroup: Unknown subsys name 'net' [ 72.793955][ T5791] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.425478][ T5791] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.748158][ T2893] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.764743][ T2893] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.831831][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.841168][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.126894][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 78.219734][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.229079][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.239095][ T5830] bridge_slave_0: entered allmulticast mode [ 78.247168][ T5830] bridge_slave_0: entered promiscuous mode [ 78.258254][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.265741][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.273634][ T5830] bridge_slave_1: entered allmulticast mode [ 78.281308][ T5830] bridge_slave_1: entered promiscuous mode [ 78.327030][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.340410][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.419338][ T5830] team0: Port device team_slave_0 added [ 78.436805][ T5830] team0: Port device team_slave_1 added [ 78.521992][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.530420][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.557778][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.574055][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.581432][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.607874][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.683563][ T5830] hsr_slave_0: entered promiscuous mode [ 78.690862][ T5830] hsr_slave_1: entered promiscuous mode [ 78.912941][ T5830] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.950738][ T5830] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.963419][ T5830] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.974030][ T5830] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.078752][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.112007][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.128203][ T2893] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.135711][ T2893] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.165238][ T587] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.172533][ T587] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.432946][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.497397][ T5830] veth0_vlan: entered promiscuous mode [ 79.514130][ T5830] veth1_vlan: entered promiscuous mode [ 79.560157][ T5830] veth0_macvtap: entered promiscuous mode [ 79.573348][ T5830] veth1_macvtap: entered promiscuous mode [ 79.602384][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.626500][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.647506][ T5830] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.657242][ T5830] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.667368][ T5830] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.676321][ T5830] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.835793][ T5830] syz-executor (5830) used greatest stack depth: 20048 bytes left [ 79.902768][ T59] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.916667][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.928743][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.937627][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.946894][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.956977][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 79.966083][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.879915][ T28] cfg80211: failed to load regulatory.db 2025/11/14 05:54:00 executed programs: 0 [ 82.540894][ T5104] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.549843][ T5104] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.558946][ T5104] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.568307][ T5104] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.577110][ T5104] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 82.584832][ T5104] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.613980][ T59] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.774372][ T5901] chnl_net:caif_netlink_parms(): no params data found [ 82.855657][ T5901] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.862903][ T5901] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.870743][ T5901] bridge_slave_0: entered allmulticast mode [ 82.877876][ T5901] bridge_slave_0: entered promiscuous mode [ 82.887330][ T5901] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.894887][ T5901] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.902181][ T5901] bridge_slave_1: entered allmulticast mode [ 82.909674][ T5901] bridge_slave_1: entered promiscuous mode [ 82.942363][ T5901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.956990][ T5901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.988541][ T5901] team0: Port device team_slave_0 added [ 82.999322][ T5901] team0: Port device team_slave_1 added [ 83.027820][ T5901] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.035088][ T5901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.062090][ T5901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.075257][ T5901] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.082268][ T5901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.109293][ T5901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.150328][ T5901] hsr_slave_0: entered promiscuous mode [ 83.159646][ T5901] hsr_slave_1: entered promiscuous mode [ 83.166723][ T5901] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.176598][ T5901] Cannot create hsr debugfs directory [ 84.678525][ T5104] Bluetooth: hci0: command tx timeout [ 84.936068][ T59] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.028653][ T59] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.063230][ T5901] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.080205][ T5901] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.108055][ T59] hsr_slave_0: left promiscuous mode [ 86.119870][ T59] hsr_slave_1: left promiscuous mode [ 86.129608][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.138251][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.150577][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.158823][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.167283][ T59] bridge_slave_1: left allmulticast mode [ 86.173213][ T59] bridge_slave_1: left promiscuous mode [ 86.180426][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.197076][ T59] bridge_slave_0: left allmulticast mode [ 86.202830][ T59] bridge_slave_0: left promiscuous mode [ 86.210289][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.249304][ T59] veth1_macvtap: left promiscuous mode [ 86.256218][ T59] veth0_macvtap: left promiscuous mode [ 86.262066][ T59] veth1_vlan: left promiscuous mode [ 86.271090][ T59] veth0_vlan: left promiscuous mode [ 86.754992][ T5104] Bluetooth: hci0: command tx timeout [ 86.944691][ T59] team0 (unregistering): Port device team_slave_1 removed [ 87.009567][ T59] team0 (unregistering): Port device team_slave_0 removed [ 87.076870][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.136278][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.612438][ T59] bond0 (unregistering): Released all slaves [ 87.709364][ T5901] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.723995][ T5901] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.869783][ T5901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.893113][ T5901] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.920151][ T3472] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.927911][ T3472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.959503][ T3466] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.966869][ T3466] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.335532][ T5901] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.450849][ T5901] veth0_vlan: entered promiscuous mode [ 88.479173][ T5901] veth1_vlan: entered promiscuous mode [ 88.547770][ T5901] veth0_macvtap: entered promiscuous mode [ 88.559437][ T5901] veth1_macvtap: entered promiscuous mode [ 88.581802][ T5901] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.602946][ T5901] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.617843][ T5901] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.627927][ T5901] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.637181][ T5901] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.646491][ T5901] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.783494][ T3466] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.801893][ T3466] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.834822][ T5104] Bluetooth: hci0: command tx timeout 2025/11/14 05:54:07 executed programs: 2 [ 88.871807][ T2893] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.880057][ T2893] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.977063][ T5947] netlink: 'syz.0.17': attribute type 10 has an invalid length. [ 89.010089][ T5947] team0: Port device wlan1 added [ 89.092425][ T5948] netlink: 'syz.0.18': attribute type 10 has an invalid length. [ 89.178650][ T5949] netlink: 'syz.0.19': attribute type 10 has an invalid length. [ 89.221503][ T5950] netlink: 'syz.0.20': attribute type 10 has an invalid length. [ 89.282669][ T5951] netlink: 'syz.0.21': attribute type 10 has an invalid length. [ 89.318534][ T5952] netlink: 'syz.0.22': attribute type 10 has an invalid length. [ 89.383266][ T5953] netlink: 'syz.0.23': attribute type 10 has an invalid length. [ 89.420180][ T5954] netlink: 'syz.0.24': attribute type 10 has an invalid length. [ 89.513526][ T5955] netlink: 'syz.0.25': attribute type 10 has an invalid length. [ 89.587916][ T5956] netlink: 'syz.0.26': attribute type 10 has an invalid length. [ 90.915865][ T5104] Bluetooth: hci0: command tx timeout 2025/11/14 05:54:12 executed programs: 165 [ 93.999693][ T6112] validate_nla: 155 callbacks suppressed [ 93.999713][ T6112] netlink: 'syz.0.182': attribute type 10 has an invalid length. [ 94.049290][ T6113] netlink: 'syz.0.183': attribute type 10 has an invalid length. [ 94.081868][ T6114] netlink: 'syz.0.184': attribute type 10 has an invalid length. [ 94.119129][ T6115] netlink: 'syz.0.185': attribute type 10 has an invalid length. [ 94.151581][ T6116] netlink: 'syz.0.186': attribute type 10 has an invalid length. [ 94.183873][ T6117] netlink: 'syz.0.187': attribute type 10 has an invalid length. [ 94.227489][ T6118] netlink: 'syz.0.188': attribute type 10 has an invalid length. [ 94.262437][ T6119] netlink: 'syz.0.189': attribute type 10 has an invalid length. [ 94.294171][ T6120] netlink: 'syz.0.190': attribute type 10 has an invalid length. [ 94.331350][ T6121] netlink: 'syz.0.191': attribute type 10 has an invalid length. 2025/11/14 05:54:17 executed programs: 366 [ 99.008731][ T6312] validate_nla: 190 callbacks suppressed [ 99.008767][ T6312] netlink: 'syz.0.382': attribute type 10 has an invalid length. [ 99.044236][ T6313] netlink: 'syz.0.383': attribute type 10 has an invalid length. [ 99.070083][ T6314] netlink: 'syz.0.384': attribute type 10 has an invalid length. [ 99.093726][ T6315] netlink: 'syz.0.385': attribute type 10 has an invalid length. [ 99.118283][ T6316] netlink: 'syz.0.386': attribute type 10 has an invalid length. [ 99.142409][ T6317] netlink: 'syz.0.387': attribute type 10 has an invalid length. [ 99.169965][ T6318] netlink: 'syz.0.388': attribute type 10 has an invalid length. [ 99.193038][ T6319] netlink: 'syz.0.389': attribute type 10 has an invalid length. [ 99.217742][ T6320] netlink: 'syz.0.390': attribute type 10 has an invalid length. [ 99.241156][ T6321] netlink: 'syz.0.391': attribute type 10 has an invalid length. [ 103.846489][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 103.880199][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 103.893919][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 103.916156][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 103.924828][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 103.932683][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 104.083407][ T6548] chnl_net:caif_netlink_parms(): no params data found [ 104.141721][ T2893] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.210845][ T6548] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.218528][ T6548] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.226100][ T6548] bridge_slave_0: entered allmulticast mode [ 104.233174][ T6548] bridge_slave_0: entered promiscuous mode [ 104.256853][ T2893] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.272943][ T6548] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.280995][ T6548] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.288744][ T6548] bridge_slave_1: entered allmulticast mode [ 104.297070][ T6548] bridge_slave_1: entered promiscuous mode [ 104.348257][ T2893] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.369102][ T6548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.381096][ T6548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.438041][ T2893] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.459719][ T6548] team0: Port device team_slave_0 added [ 104.470938][ T6548] team0: Port device team_slave_1 added [ 104.511435][ T6548] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.518769][ T6548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.545681][ T6548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.559629][ T6548] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.566746][ T6548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.593686][ T6548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.641669][ T6548] hsr_slave_0: entered promiscuous mode [ 104.648319][ T6548] hsr_slave_1: entered promiscuous mode [ 105.517022][ T6548] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.528920][ T6548] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.543015][ T6548] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.578964][ T6548] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.643357][ T2893] [ 105.645840][ T2893] ====================================================== [ 105.653026][ T2893] WARNING: possible circular locking dependency detected [ 105.660169][ T2893] syzkaller #0 Not tainted [ 105.664647][ T2893] ------------------------------------------------------ [ 105.671720][ T2893] kworker/u4:6/2893 is trying to acquire lock: [ 105.677919][ T2893] ffff888023fb0d00 (team->team_lock_key#2){+.+.}-{3:3}, at: team_del_slave+0x32/0x1c0 [ 105.687617][ T2893] [ 105.687617][ T2893] but task is already holding lock: [ 105.695046][ T2893] ffff88807bd40768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x292/0x680 [ 105.705510][ T2893] [ 105.705510][ T2893] which lock already depends on the new lock. [ 105.705510][ T2893] [ 105.715986][ T2893] [ 105.715986][ T2893] the existing dependency chain (in reverse order) is: [ 105.725122][ T2893] [ 105.725122][ T2893] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 105.732952][ T2893] __mutex_lock+0x129/0xcc0 [ 105.737995][ T2893] ieee80211_open+0x144/0x200 [ 105.743289][ T2893] __dev_open+0x2bc/0x430 [ 105.748318][ T2893] dev_open+0xab/0x170 [ 105.752960][ T2893] team_add_slave+0xae7/0x2660 [ 105.758285][ T2893] do_setlink+0xe14/0x3fb0 [ 105.763241][ T2893] rtnl_newlink+0x175b/0x2020 [ 105.768464][ T2893] rtnetlink_rcv_msg+0x7c7/0xf10 [ 105.773974][ T2893] netlink_rcv_skb+0x216/0x480 [ 105.779287][ T2893] netlink_unicast+0x751/0x8d0 [ 105.784592][ T2893] netlink_sendmsg+0x8c1/0xbe0 [ 105.789901][ T2893] ____sys_sendmsg+0x5bf/0x950 [ 105.795203][ T2893] ___sys_sendmsg+0x220/0x290 [ 105.800398][ T2893] __se_sys_sendmsg+0x1a5/0x270 [ 105.805866][ T2893] do_syscall_64+0x55/0xb0 [ 105.810894][ T2893] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 105.817538][ T2893] [ 105.817538][ T2893] -> #0 (team->team_lock_key#2){+.+.}-{3:3}: [ 105.825795][ T2893] __lock_acquire+0x2ddb/0x7c80 [ 105.831246][ T2893] lock_acquire+0x197/0x410 [ 105.836531][ T2893] __mutex_lock+0x129/0xcc0 [ 105.841558][ T2893] team_del_slave+0x32/0x1c0 [ 105.846674][ T2893] team_device_event+0x28d/0xa20 [ 105.852395][ T2893] notifier_call_chain+0x197/0x390 [ 105.858023][ T2893] unregister_netdevice_many_notify+0xf36/0x1810 [ 105.864874][ T2893] unregister_netdevice_queue+0x324/0x360 [ 105.871107][ T2893] _cfg80211_unregister_wdev+0x16b/0x580 [ 105.877276][ T2893] ieee80211_remove_interfaces+0x496/0x680 [ 105.883642][ T2893] ieee80211_unregister_hw+0x5d/0x2a0 [ 105.889567][ T2893] mac80211_hwsim_del_radio+0x274/0x450 [ 105.895669][ T2893] hwsim_exit_net+0x585/0x640 [ 105.901212][ T2893] cleanup_net+0x6f4/0xb90 [ 105.906184][ T2893] process_scheduled_works+0xa45/0x15b0 [ 105.912248][ T2893] worker_thread+0xa55/0xfc0 [ 105.917434][ T2893] kthread+0x2fa/0x390 [ 105.922079][ T2893] ret_from_fork+0x48/0x80 [ 105.927065][ T2893] ret_from_fork_asm+0x11/0x20 [ 105.932400][ T2893] [ 105.932400][ T2893] other info that might help us debug this: [ 105.932400][ T2893] [ 105.942886][ T2893] Possible unsafe locking scenario: [ 105.942886][ T2893] [ 105.950397][ T2893] CPU0 CPU1 [ 105.955761][ T2893] ---- ---- [ 105.961168][ T2893] lock(&rdev->wiphy.mtx); [ 105.965703][ T2893] lock(team->team_lock_key#2); [ 105.973190][ T2893] lock(&rdev->wiphy.mtx); [ 105.980221][ T2893] lock(team->team_lock_key#2); [ 105.985157][ T2893] [ 105.985157][ T2893] *** DEADLOCK *** [ 105.985157][ T2893] [ 105.993328][ T2893] 5 locks held by kworker/u4:6/2893: [ 105.998620][ T2893] #0: ffff888017873938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 106.009515][ T2893] #1: ffffc9000bcb7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 106.020053][ T2893] #2: ffffffff8dfaeed0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x136/0xb90 [ 106.029540][ T2893] #3: ffffffff8dfbbd08 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0 [ 106.039403][ T2893] #4: ffff88807bd40768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x292/0x680 [ 106.050208][ T2893] [ 106.050208][ T2893] stack backtrace: [ 106.056140][ T2893] CPU: 0 PID: 2893 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 106.064078][ T2893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 106.074178][ T2893] Workqueue: netns cleanup_net [ 106.079007][ T2893] Call Trace: [ 106.082320][ T2893] [ 106.085271][ T2893] dump_stack_lvl+0x16c/0x230 [ 106.090005][ T2893] ? load_image+0x3b0/0x3b0 [ 106.094974][ T2893] ? show_regs_print_info+0x20/0x20 [ 106.100186][ T2893] ? print_circular_bug+0x12b/0x1a0 [ 106.105410][ T2893] check_noncircular+0x2bd/0x3c0 [ 106.110387][ T2893] ? print_deadlock_bug+0x5d0/0x5d0 [ 106.115777][ T2893] ? lockdep_lock+0xe0/0x220 [ 106.120454][ T2893] ? _find_first_zero_bit+0xd3/0x100 [ 106.125769][ T2893] __lock_acquire+0x2ddb/0x7c80 [ 106.130641][ T2893] ? verify_lock_unused+0x140/0x140 [ 106.135868][ T2893] ? verify_lock_unused+0x140/0x140 [ 106.141106][ T2893] lock_acquire+0x197/0x410 [ 106.145711][ T2893] ? team_del_slave+0x32/0x1c0 [ 106.150478][ T2893] ? __might_sleep+0xe0/0xe0 [ 106.155118][ T2893] ? read_lock_is_recursive+0x20/0x20 [ 106.160529][ T2893] __mutex_lock+0x129/0xcc0 [ 106.165056][ T2893] ? team_del_slave+0x32/0x1c0 [ 106.169892][ T2893] ? __lock_acquire+0x7c80/0x7c80 [ 106.174954][ T2893] ? rcu_is_watching+0x15/0xb0 [ 106.179720][ T2893] ? trace_contention_end+0x39/0xe0 [ 106.184922][ T2893] ? __mutex_lock+0x304/0xcc0 [ 106.189674][ T2893] ? team_del_slave+0x32/0x1c0 [ 106.194430][ T2893] ? mutex_lock_nested+0x20/0x20 [ 106.199370][ T2893] ? bond_netdev_event+0xe1/0xef0 [ 106.204394][ T2893] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 106.210036][ T2893] ? bond_ipsec_offload_ok+0x410/0x410 [ 106.215567][ T2893] team_del_slave+0x32/0x1c0 [ 106.220222][ T2893] team_device_event+0x28d/0xa20 [ 106.225194][ T2893] notifier_call_chain+0x197/0x390 [ 106.230367][ T2893] unregister_netdevice_many_notify+0xf36/0x1810 [ 106.236832][ T2893] ? lock_chain_count+0x20/0x20 [ 106.241754][ T2893] ? unregister_netdevice_many+0x20/0x20 [ 106.247425][ T2893] ? kernfs_remove_by_name_ns+0x117/0x150 [ 106.253328][ T2893] ? __lock_acquire+0x7c80/0x7c80 [ 106.258398][ T2893] unregister_netdevice_queue+0x324/0x360 [ 106.264184][ T2893] ? list_netdevice+0x730/0x730 [ 106.269101][ T2893] ? kernfs_remove_by_name_ns+0x117/0x150 [ 106.274968][ T2893] _cfg80211_unregister_wdev+0x16b/0x580 [ 106.280687][ T2893] ieee80211_remove_interfaces+0x496/0x680 [ 106.286562][ T2893] ? ieee80211_do_stop+0x1db0/0x1db0 [ 106.291989][ T2893] ? rcu_is_watching+0x15/0xb0 [ 106.296803][ T2893] ieee80211_unregister_hw+0x5d/0x2a0 [ 106.302238][ T2893] mac80211_hwsim_del_radio+0x274/0x450 [ 106.307850][ T2893] ? rhashtable_remove_fast+0xbf0/0xbf0 [ 106.313424][ T2893] hwsim_exit_net+0x585/0x640 [ 106.318162][ T2893] ? hwsim_init_net+0x90/0x90 [ 106.322889][ T2893] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 106.328746][ T2893] cleanup_net+0x6f4/0xb90 [ 106.333224][ T2893] ? ops_free_list+0x3b0/0x3b0 [ 106.338028][ T2893] ? _raw_spin_unlock_irq+0x23/0x50 [ 106.343389][ T2893] ? process_scheduled_works+0x957/0x15b0 [ 106.349152][ T2893] ? process_scheduled_works+0x957/0x15b0 [ 106.354923][ T2893] process_scheduled_works+0xa45/0x15b0 [ 106.360632][ T2893] ? assign_work+0x400/0x400 [ 106.365281][ T2893] ? assign_work+0x39e/0x400 [ 106.369888][ T2893] worker_thread+0xa55/0xfc0 [ 106.374481][ T2893] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 106.385359][ T2893] ? _raw_spin_unlock+0x40/0x40 [ 106.390379][ T2893] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 106.396377][ T2893] kthread+0x2fa/0x390 [ 106.400657][ T2893] ? pr_cont_work+0x560/0x560 [ 106.405378][ T2893] ? kthread_blkcg+0xd0/0xd0 [ 106.410138][ T2893] ret_from_fork+0x48/0x80 [ 106.414792][ T2893] ? kthread_blkcg+0xd0/0xd0 [ 106.419512][ T2893] ret_from_fork_asm+0x11/0x20 [ 106.424346][ T2893] [ 106.432196][ T51] Bluetooth: hci0: command tx timeout [ 106.444426][ T2893] team0: Port device wlan1 removed [ 106.548223][ T6548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.585176][ T2893] hsr_slave_0: left promiscuous mode [ 106.591316][ T2893] hsr_slave_1: left promiscuous mode [ 106.600484][ T2893] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.608572][ T2893] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.617551][ T2893] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.625515][ T2893] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.633705][ T2893] bridge_slave_1: left allmulticast mode [ 106.640811][ T2893] bridge_slave_1: left promiscuous mode [ 106.647969][ T2893] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.658527][ T2893] bridge_slave_0: left allmulticast mode [ 106.664295][ T2893] bridge_slave_0: left promiscuous mode [ 106.671122][ T2893] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.684648][ T2893] veth1_macvtap: left promiscuous mode [ 106.690459][ T2893] veth0_macvtap: left promiscuous mode [ 106.697533][ T2893] veth1_vlan: left promiscuous mode [ 106.703202][ T2893] veth0_vlan: left promiscuous mode [ 106.955494][ T2893] team0 (unregistering): Port device team_slave_1 removed [ 106.993016][ T2893] team0 (unregistering): Port device team_slave_0 removed [ 107.026457][ T2893] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.058993][ T2893] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.211251][ T2893] bond0 (unregistering): Released all slaves [ 107.293353][ T6548] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.305054][ T3466] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.312268][ T3466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.335506][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.342802][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.429376][ T6548] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 107.588664][ T6548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.628697][ T6548] veth0_vlan: entered promiscuous mode [ 107.639661][ T6548] veth1_vlan: entered promiscuous mode [ 107.665740][ T6548] veth0_macvtap: entered promiscuous mode [ 107.674633][ T6548] veth1_macvtap: entered promiscuous mode [ 107.693715][ T6548] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.707027][ T6548] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.718241][ T6548] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.727023][ T6548] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.737557][ T6548] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.746345][ T6548] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.776670][ T6548] ieee80211 phy7: Selected rate control algorithm 'minstrel_ht' [ 107.798226][ T587] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.799947][ T6548] ieee80211 phy8: Selected rate control algorithm 'minstrel_ht' [ 107.818035][ T587] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/11/14 05:54:26 executed programs: 602 [ 107.841314][ T587] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.849598][ T587] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.888211][ T6598] validate_nla: 225 callbacks suppressed [ 107.888246][ T6598] netlink: 'syz.0.617': attribute type 10 has an invalid length. [ 107.913500][ T6598] team0: Port device wlan1 added [ 107.936812][ T6599] netlink: 'syz.0.618': attribute type 10 has an invalid length. [ 107.965443][ T6600] netlink: 'syz.0.619': attribute type 10 has an invalid length. [ 107.988033][ T6601] netlink: 'syz.0.620': attribute type 10 has an invalid length. [ 108.009301][ T6602] netlink: 'syz.0.621': attribute type 10 has an invalid length. [ 108.028021][ T6603] netlink: 'syz.0.622': attribute type 10 has an invalid length. [ 108.049693][ T6604] netlink: 'syz.0.623': attribute type 10 has an invalid length. [ 108.069418][ T6605] netlink: 'syz.0.624': attribute type 10 has an invalid length. [ 108.087262][ T6606] netlink: 'syz.0.625': attribute type 10 has an invalid length. [ 108.112274][ T6607] netlink: 'syz.0.626': attribute type 10 has an invalid length. [ 108.515211][ T51] Bluetooth: hci0: command tx timeout [ 110.595232][ T51] Bluetooth: hci0: command tx timeout [ 112.674993][ T51] Bluetooth: hci0: command tx timeout 2025/11/14 05:54:31 executed programs: 870 [ 112.902254][ T6869] validate_nla: 260 callbacks suppressed [ 112.902283][ T6869] netlink: 'syz.0.887': attribute type 10 has an invalid length. [ 112.929394][ T6870] netlink: 'syz.0.888': attribute type 10 has an invalid length. [ 112.948858][ T6871] netlink: 'syz.0.889': attribute type 10 has an invalid length. [ 112.969783][ T6872] netlink: 'syz.0.890': attribute type 10 has an invalid length. [ 112.986047][ T6873] netlink: 'syz.0.891': attribute type 10 has an invalid length. [ 113.004014][ T6874] netlink: 'syz.0.892': attribute type 10 has an invalid length. [ 113.030854][ T6875] netlink: 'syz.0.893': attribute type 10 has an invalid length. [ 113.050870][ T6876] netlink: 'syz.0.894': attribute type 10 has an invalid length. [ 113.069293][ T6877] netlink: 'syz.0.895': attribute type 10 has an invalid length. [ 113.092269][ T6878] netlink: 'syz.0.896': attribute type 10 has an invalid length.