Warning: Permanently added '10.128.1.8' (ED25519) to the list of known hosts. 2026/05/10 09:36:44 parsed 1 programs [ 91.368131][ T5785] cgroup: Unknown subsys name 'net' [ 91.511742][ T5785] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 92.204567][ T27] cfg80211: failed to load regulatory.db [ 93.244312][ T5785] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 95.335667][ T5811] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.345206][ T5811] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.353921][ T5811] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.362866][ T5811] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.370715][ T5811] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 95.378864][ T5811] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.399831][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 96.481878][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.489052][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.496851][ T5828] bridge_slave_0: entered allmulticast mode [ 96.507049][ T5828] bridge_slave_0: entered promiscuous mode [ 96.517430][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.524741][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.532033][ T5828] bridge_slave_1: entered allmulticast mode [ 96.539058][ T5828] bridge_slave_1: entered promiscuous mode [ 96.571502][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.584772][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.627633][ T5828] team0: Port device team_slave_0 added [ 96.635893][ T5828] team0: Port device team_slave_1 added [ 96.661909][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.668884][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.694856][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.708912][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.715981][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.741989][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.790522][ T5828] hsr_slave_0: entered promiscuous mode [ 96.797532][ T5828] hsr_slave_1: entered promiscuous mode [ 96.985205][ T5828] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.012523][ T5828] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.023607][ T5828] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.035470][ T5828] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.065800][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.073103][ T5828] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.081045][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.088312][ T5828] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.157434][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.188445][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.197018][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.222549][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.235866][ T2912] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.243091][ T2912] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.257411][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.264785][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.501219][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.547788][ T5828] veth0_vlan: entered promiscuous mode [ 97.567576][ T5828] veth1_vlan: entered promiscuous mode [ 97.607685][ T5828] veth0_macvtap: entered promiscuous mode [ 97.618328][ T5828] veth1_macvtap: entered promiscuous mode [ 97.645065][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.661019][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.675802][ T5828] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.686318][ T5828] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.695160][ T5828] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.704137][ T5828] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.897847][ T2912] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.402876][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.410939][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.457670][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.467202][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.426517][ T2912] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/05/10 09:36:56 executed programs: 0 [ 100.760267][ T5082] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 100.768510][ T5082] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 100.778613][ T5082] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 100.787370][ T5082] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 100.796041][ T5082] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 100.804153][ T5082] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 100.963367][ T5890] chnl_net:caif_netlink_parms(): no params data found [ 101.037423][ T5890] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.044968][ T5890] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.052916][ T5890] bridge_slave_0: entered allmulticast mode [ 101.060504][ T5890] bridge_slave_0: entered promiscuous mode [ 101.069328][ T5890] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.076861][ T5890] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.084867][ T5890] bridge_slave_1: entered allmulticast mode [ 101.092115][ T5890] bridge_slave_1: entered promiscuous mode [ 101.125977][ T5890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.138805][ T5890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.173608][ T5890] team0: Port device team_slave_0 added [ 101.181622][ T5890] team0: Port device team_slave_1 added [ 101.208334][ T5890] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.215540][ T5890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.242027][ T5890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.254894][ T5890] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.262255][ T5890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.288338][ T5890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.332561][ T5890] hsr_slave_0: entered promiscuous mode [ 101.338979][ T5890] hsr_slave_1: entered promiscuous mode [ 101.345610][ T5890] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.354634][ T5890] Cannot create hsr debugfs directory [ 102.484838][ T2912] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.549745][ T2912] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.853764][ T5082] Bluetooth: hci0: command tx timeout [ 103.491633][ T2912] hsr_slave_0: left promiscuous mode [ 103.498731][ T2912] hsr_slave_1: left promiscuous mode [ 103.506575][ T2912] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.515709][ T2912] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.526905][ T2912] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.536066][ T2912] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.545673][ T2912] bridge_slave_1: left allmulticast mode [ 103.551391][ T2912] bridge_slave_1: left promiscuous mode [ 103.560464][ T2912] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.575077][ T2912] bridge_slave_0: left allmulticast mode [ 103.580807][ T2912] bridge_slave_0: left promiscuous mode [ 103.588971][ T2912] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.619901][ T2912] veth1_macvtap: left promiscuous mode [ 103.626888][ T2912] veth0_macvtap: left promiscuous mode [ 103.634801][ T2912] veth1_vlan: left promiscuous mode [ 103.640443][ T2912] veth0_vlan: left promiscuous mode [ 104.169001][ T2912] team0 (unregistering): Port device team_slave_1 removed [ 104.212834][ T2912] team0 (unregistering): Port device team_slave_0 removed [ 104.245332][ T2912] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.290262][ T2912] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.540783][ T2912] bond0 (unregistering): Released all slaves [ 104.638935][ T5890] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 104.650627][ T5890] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 104.661277][ T5890] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 104.673969][ T5890] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 104.793659][ T5890] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.822119][ T5890] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.837782][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.844999][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.889543][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.896747][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.923144][ T5082] Bluetooth: hci0: command tx timeout [ 105.380032][ T5890] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.446797][ T5890] veth0_vlan: entered promiscuous mode [ 105.466023][ T5890] veth1_vlan: entered promiscuous mode [ 105.525278][ T5890] veth0_macvtap: entered promiscuous mode [ 105.535502][ T5890] veth1_macvtap: entered promiscuous mode [ 105.556812][ T5890] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.572650][ T5890] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.584592][ T5890] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.593893][ T5890] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.602710][ T5890] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.611454][ T5890] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.676648][ T2952] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.685777][ T2952] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.717053][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.726639][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/05/10 09:37:01 executed programs: 2 [ 105.863499][ T5929] netlink: 'syz.0.17': attribute type 10 has an invalid length. [ 105.896765][ T5929] team0: Port device wlan1 added [ 105.966180][ T5930] netlink: 'syz.0.18': attribute type 10 has an invalid length. [ 106.054171][ T5931] netlink: 'syz.0.19': attribute type 10 has an invalid length. [ 106.092027][ T5932] netlink: 'syz.0.20': attribute type 10 has an invalid length. [ 106.165468][ T5933] netlink: 'syz.0.21': attribute type 10 has an invalid length. [ 106.251742][ T5934] netlink: 'syz.0.22': attribute type 10 has an invalid length. [ 106.288207][ T5935] netlink: 'syz.0.23': attribute type 10 has an invalid length. [ 106.369955][ T5936] netlink: 'syz.0.24': attribute type 10 has an invalid length. [ 106.438802][ T5937] netlink: 'syz.0.25': attribute type 10 has an invalid length. [ 106.526410][ T5938] netlink: 'syz.0.26': attribute type 10 has an invalid length. [ 107.002146][ T5082] Bluetooth: hci0: command tx timeout [ 109.082299][ T5082] Bluetooth: hci0: command tx timeout 2026/05/10 09:37:06 executed programs: 169 [ 110.872016][ T6100] validate_nla: 161 callbacks suppressed [ 110.872033][ T6100] netlink: 'syz.0.188': attribute type 10 has an invalid length. [ 110.907974][ T6101] netlink: 'syz.0.189': attribute type 10 has an invalid length. [ 110.944790][ T6102] netlink: 'syz.0.190': attribute type 10 has an invalid length. [ 110.970671][ T6103] netlink: 'syz.0.191': attribute type 10 has an invalid length. [ 111.000308][ T6104] netlink: 'syz.0.192': attribute type 10 has an invalid length. [ 111.030329][ T6105] netlink: 'syz.0.193': attribute type 10 has an invalid length. [ 111.075042][ T6106] netlink: 'syz.0.194': attribute type 10 has an invalid length. [ 111.109253][ T6107] netlink: 'syz.0.195': attribute type 10 has an invalid length. [ 111.140047][ T6108] netlink: 'syz.0.196': attribute type 10 has an invalid length. [ 111.169993][ T6109] netlink: 'syz.0.197': attribute type 10 has an invalid length. 2026/05/10 09:37:11 executed programs: 373 [ 115.897124][ T6305] validate_nla: 195 callbacks suppressed [ 115.897167][ T6305] netlink: 'syz.0.393': attribute type 10 has an invalid length. [ 115.939995][ T6306] netlink: 'syz.0.394': attribute type 10 has an invalid length. [ 115.969506][ T6307] netlink: 'syz.0.395': attribute type 10 has an invalid length. [ 116.003648][ T6308] netlink: 'syz.0.396': attribute type 10 has an invalid length. [ 116.037320][ T6309] netlink: 'syz.0.397': attribute type 10 has an invalid length. [ 116.064576][ T6310] netlink: 'syz.0.398': attribute type 10 has an invalid length. [ 116.106482][ T6311] netlink: 'syz.0.399': attribute type 10 has an invalid length. [ 116.135270][ T6312] netlink: 'syz.0.400': attribute type 10 has an invalid length. [ 116.164276][ T6313] netlink: 'syz.0.401': attribute type 10 has an invalid length. [ 116.195399][ T6314] netlink: 'syz.0.402': attribute type 10 has an invalid length. 2026/05/10 09:37:16 executed programs: 581 [ 120.919889][ T6513] validate_nla: 198 callbacks suppressed [ 120.919906][ T6513] netlink: 'syz.0.601': attribute type 10 has an invalid length. [ 120.956320][ T6514] netlink: 'syz.0.602': attribute type 10 has an invalid length. [ 120.986110][ T6515] netlink: 'syz.0.603': attribute type 10 has an invalid length. [ 121.018793][ T6516] netlink: 'syz.0.604': attribute type 10 has an invalid length. [ 121.051571][ T6517] netlink: 'syz.0.605': attribute type 10 has an invalid length. [ 121.082873][ T6518] netlink: 'syz.0.606': attribute type 10 has an invalid length. [ 121.113884][ T6519] netlink: 'syz.0.607': attribute type 10 has an invalid length. [ 121.144550][ T6520] netlink: 'syz.0.608': attribute type 10 has an invalid length. [ 121.174282][ T6521] netlink: 'syz.0.609': attribute type 10 has an invalid length. [ 121.203390][ T6522] netlink: 'syz.0.610': attribute type 10 has an invalid length. [ 121.438911][ T5811] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 121.455953][ T5811] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 121.464610][ T5811] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 121.473841][ T5811] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 121.483464][ T5811] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 121.490927][ T5811] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 121.647306][ T6530] chnl_net:caif_netlink_parms(): no params data found [ 121.686608][ T2912] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.767420][ T2912] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.780486][ T6530] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.789955][ T6530] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.797483][ T6530] bridge_slave_0: entered allmulticast mode [ 121.805250][ T6530] bridge_slave_0: entered promiscuous mode [ 121.815272][ T6530] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.822620][ T6530] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.829818][ T6530] bridge_slave_1: entered allmulticast mode [ 121.837605][ T6530] bridge_slave_1: entered promiscuous mode [ 121.855451][ T2912] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.889765][ T6530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.901673][ T6530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.935151][ T2912] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.964736][ T6530] team0: Port device team_slave_0 added [ 121.973255][ T6530] team0: Port device team_slave_1 added [ 122.003905][ T6530] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.010914][ T6530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.037193][ T6530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.050619][ T6530] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.057839][ T6530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.083957][ T6530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.134755][ T6530] hsr_slave_0: entered promiscuous mode [ 122.141323][ T6530] hsr_slave_1: entered promiscuous mode [ 122.957072][ T6530] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 122.968690][ T6530] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 122.984354][ T6530] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 123.017728][ T6530] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 123.064344][ T2912] [ 123.066743][ T2912] ====================================================== [ 123.073797][ T2912] WARNING: possible circular locking dependency detected [ 123.080858][ T2912] syzkaller #0 Not tainted [ 123.085315][ T2912] ------------------------------------------------------ [ 123.092349][ T2912] kworker/u4:7/2912 is trying to acquire lock: [ 123.098528][ T2912] ffff8880256b0d00 (team->team_lock_key#2){+.+.}-{3:3}, at: team_del_slave+0x32/0x1c0 [ 123.108155][ T2912] [ 123.108155][ T2912] but task is already holding lock: [ 123.115550][ T2912] ffff88802c4c0768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x29a/0x690 [ 123.125953][ T2912] [ 123.125953][ T2912] which lock already depends on the new lock. [ 123.125953][ T2912] [ 123.136374][ T2912] [ 123.136374][ T2912] the existing dependency chain (in reverse order) is: [ 123.145407][ T2912] [ 123.145407][ T2912] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 123.153174][ T2912] __mutex_lock+0x136/0xcc0 [ 123.158220][ T2912] ieee80211_open+0x144/0x200 [ 123.163447][ T2912] __dev_open+0x2cb/0x430 [ 123.168318][ T2912] dev_open+0xab/0x190 [ 123.172930][ T2912] team_add_slave+0x75f/0x29a0 [ 123.178251][ T2912] do_setlink+0xdfe/0x4130 [ 123.183207][ T2912] rtnl_newlink+0x17da/0x20a0 [ 123.188427][ T2912] rtnetlink_rcv_msg+0x869/0xfa0 [ 123.193919][ T2912] netlink_rcv_skb+0x241/0x4d0 [ 123.199245][ T2912] netlink_unicast+0x751/0x8d0 [ 123.204557][ T2912] netlink_sendmsg+0x8d0/0xbf0 [ 123.209874][ T2912] ____sys_sendmsg+0x5ba/0x960 [ 123.215186][ T2912] ___sys_sendmsg+0x2a6/0x360 [ 123.220402][ T2912] __se_sys_sendmsg+0x1c2/0x2b0 [ 123.225794][ T2912] do_syscall_64+0x55/0xa0 [ 123.230747][ T2912] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 123.237188][ T2912] [ 123.237188][ T2912] -> #0 (team->team_lock_key#2){+.+.}-{3:3}: [ 123.245393][ T2912] __lock_acquire+0x2df1/0x7d40 [ 123.250785][ T2912] lock_acquire+0x19e/0x420 [ 123.255830][ T2912] __mutex_lock+0x136/0xcc0 [ 123.260879][ T2912] team_del_slave+0x32/0x1c0 [ 123.266011][ T2912] team_device_event+0x28d/0xa20 [ 123.271488][ T2912] notifier_call_chain+0x197/0x380 [ 123.277142][ T2912] unregister_netdevice_many_notify+0x100d/0x1900 [ 123.284113][ T2912] unregister_netdevice_queue+0x32c/0x370 [ 123.290387][ T2912] _cfg80211_unregister_wdev+0x16b/0x580 [ 123.296601][ T2912] ieee80211_remove_interfaces+0x49e/0x690 [ 123.302960][ T2912] ieee80211_unregister_hw+0x5d/0x2a0 [ 123.308877][ T2912] mac80211_hwsim_del_radio+0x289/0x480 [ 123.314969][ T2912] hwsim_exit_net+0x58d/0x650 [ 123.320206][ T2912] cleanup_net+0x70a/0xbb0 [ 123.325185][ T2912] process_scheduled_works+0xa5d/0x15d0 [ 123.331284][ T2912] worker_thread+0xa55/0xfc0 [ 123.336432][ T2912] kthread+0x2fa/0x390 [ 123.341055][ T2912] ret_from_fork+0x48/0x80 [ 123.346178][ T2912] ret_from_fork_asm+0x11/0x20 [ 123.351497][ T2912] [ 123.351497][ T2912] other info that might help us debug this: [ 123.351497][ T2912] [ 123.361744][ T2912] Possible unsafe locking scenario: [ 123.361744][ T2912] [ 123.369212][ T2912] CPU0 CPU1 [ 123.374594][ T2912] ---- ---- [ 123.380067][ T2912] lock(&rdev->wiphy.mtx); [ 123.384720][ T2912] lock(team->team_lock_key#2); [ 123.392318][ T2912] lock(&rdev->wiphy.mtx); [ 123.399417][ T2912] lock(team->team_lock_key#2); [ 123.404407][ T2912] [ 123.404407][ T2912] *** DEADLOCK *** [ 123.404407][ T2912] [ 123.412606][ T2912] 5 locks held by kworker/u4:7/2912: [ 123.417924][ T2912] #0: ffff88801a254938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 123.428932][ T2912] #1: ffffc9000bacfd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 123.439491][ T2912] #2: ffffffff8e3b5a90 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x14c/0xbb0 [ 123.448930][ T2912] #3: ffffffff8e3c2ac8 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0 [ 123.458793][ T2912] #4: ffff88802c4c0768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x29a/0x690 [ 123.469620][ T2912] [ 123.469620][ T2912] stack backtrace: [ 123.475544][ T2912] CPU: 0 PID: 2912 Comm: kworker/u4:7 Not tainted syzkaller #0 [ 123.483118][ T2912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 123.493198][ T2912] Workqueue: netns cleanup_net [ 123.498018][ T2912] Call Trace: [ 123.501329][ T2912] [ 123.504294][ T2912] dump_stack_lvl+0x18c/0x250 [ 123.509004][ T2912] ? load_image+0x420/0x420 [ 123.513540][ T2912] ? show_regs_print_info+0x20/0x20 [ 123.518965][ T2912] ? print_circular_bug+0x12b/0x1a0 [ 123.524200][ T2912] check_noncircular+0x2fc/0x400 [ 123.529169][ T2912] ? print_deadlock_bug+0x5d0/0x5d0 [ 123.534390][ T2912] ? lockdep_lock+0xf5/0x230 [ 123.539008][ T2912] ? __lock_acquire+0x1273/0x7d40 [ 123.544065][ T2912] ? _find_first_zero_bit+0xd3/0x100 [ 123.549374][ T2912] __lock_acquire+0x2df1/0x7d40 [ 123.554263][ T2912] ? verify_lock_unused+0x140/0x140 [ 123.559588][ T2912] ? verify_lock_unused+0x140/0x140 [ 123.564815][ T2912] lock_acquire+0x19e/0x420 [ 123.569355][ T2912] ? team_del_slave+0x32/0x1c0 [ 123.574155][ T2912] ? __might_sleep+0xe0/0xe0 [ 123.578771][ T2912] ? read_lock_is_recursive+0x20/0x20 [ 123.584170][ T2912] __mutex_lock+0x136/0xcc0 [ 123.588709][ T2912] ? team_del_slave+0x32/0x1c0 [ 123.593488][ T2912] ? __lock_acquire+0x7d40/0x7d40 [ 123.598537][ T2912] ? rcu_is_watching+0x15/0xb0 [ 123.603333][ T2912] ? trace_contention_end+0x39/0xe0 [ 123.608562][ T2912] ? __mutex_lock+0x315/0xcc0 [ 123.613268][ T2912] ? team_del_slave+0x32/0x1c0 [ 123.618052][ T2912] ? mutex_lock_nested+0x20/0x20 [ 123.623007][ T2912] ? bond_netdev_event+0xeb/0xf20 [ 123.628062][ T2912] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 123.633737][ T2912] team_del_slave+0x32/0x1c0 [ 123.638368][ T2912] team_device_event+0x28d/0xa20 [ 123.643332][ T2912] notifier_call_chain+0x197/0x380 [ 123.648474][ T2912] unregister_netdevice_many_notify+0x100d/0x1900 [ 123.654915][ T2912] ? lock_chain_count+0x20/0x20 [ 123.659795][ T2912] ? unregister_netdevice_many+0x20/0x20 [ 123.665714][ T2912] ? kernfs_remove_by_name_ns+0x117/0x150 [ 123.671468][ T2912] ? __lock_acquire+0x7d40/0x7d40 [ 123.676518][ T2912] unregister_netdevice_queue+0x32c/0x370 [ 123.682268][ T2912] ? list_netdevice+0x730/0x730 [ 123.687141][ T2912] ? kernfs_remove_by_name_ns+0x117/0x150 [ 123.692898][ T2912] _cfg80211_unregister_wdev+0x16b/0x580 [ 123.698558][ T2912] ieee80211_remove_interfaces+0x49e/0x690 [ 123.704398][ T2912] ? ieee80211_do_stop+0x1e20/0x1e20 [ 123.709708][ T2912] ? rcu_is_watching+0x15/0xb0 [ 123.714503][ T2912] ieee80211_unregister_hw+0x5d/0x2a0 [ 123.719901][ T2912] mac80211_hwsim_del_radio+0x289/0x480 [ 123.725479][ T2912] ? rhashtable_remove_fast+0xc00/0xc00 [ 123.731052][ T2912] hwsim_exit_net+0x58d/0x650 [ 123.735754][ T2912] ? hwsim_init_net+0x90/0x90 [ 123.740456][ T2912] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 123.746287][ T2912] cleanup_net+0x70a/0xbb0 [ 123.750739][ T2912] ? ops_free_list+0x3b0/0x3b0 [ 123.755533][ T2912] ? _raw_spin_unlock_irq+0x23/0x50 [ 123.760778][ T2912] ? process_scheduled_works+0x96f/0x15d0 [ 123.766522][ T2912] ? process_scheduled_works+0x96f/0x15d0 [ 123.772274][ T2912] process_scheduled_works+0xa5d/0x15d0 [ 123.777855][ T2912] ? worker_attach_to_pool+0x380/0x380 [ 123.783347][ T2912] ? assign_work+0x3d2/0x5d0 [ 123.787961][ T2912] worker_thread+0xa55/0xfc0 [ 123.792608][ T2912] kthread+0x2fa/0x390 [ 123.796784][ T2912] ? pr_cont_work+0x560/0x560 [ 123.801588][ T2912] ? kthread_blkcg+0xd0/0xd0 [ 123.806218][ T2912] ret_from_fork+0x48/0x80 [ 123.810694][ T2912] ? kthread_blkcg+0xd0/0xd0 [ 123.815359][ T2912] ret_from_fork_asm+0x11/0x20 [ 123.820171][ T2912] [ 123.829351][ T5811] Bluetooth: hci1: command tx timeout [ 123.837260][ T2912] team0: Port device wlan1 removed [ 123.947071][ T6530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.966463][ T6530] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.987369][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.994597][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.018708][ T2912] hsr_slave_0: left promiscuous mode [ 124.024784][ T2912] hsr_slave_1: left promiscuous mode [ 124.030825][ T2912] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.041252][ T2912] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.049772][ T2912] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.057664][ T2912] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.065653][ T2912] bridge_slave_1: left allmulticast mode [ 124.071352][ T2912] bridge_slave_1: left promiscuous mode [ 124.077535][ T2912] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.086794][ T2912] bridge_slave_0: left allmulticast mode [ 124.092710][ T2912] bridge_slave_0: left promiscuous mode [ 124.098502][ T2912] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.111395][ T2912] veth1_macvtap: left promiscuous mode [ 124.117726][ T2912] veth0_macvtap: left promiscuous mode [ 124.123775][ T2912] veth1_vlan: left promiscuous mode [ 124.129140][ T2912] veth0_vlan: left promiscuous mode [ 124.371449][ T2912] team0 (unregistering): Port device team_slave_1 removed [ 124.401267][ T2912] team0 (unregistering): Port device team_slave_0 removed [ 124.427145][ T2912] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.458274][ T2912] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.580116][ T2912] bond0 (unregistering): Released all slaves [ 124.650045][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.657225][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.835617][ T6530] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.881355][ T6530] veth0_vlan: entered promiscuous mode [ 124.892965][ T6530] veth1_vlan: entered promiscuous mode [ 124.920323][ T6530] veth0_macvtap: entered promiscuous mode [ 124.931499][ T6530] veth1_macvtap: entered promiscuous mode [ 124.952657][ T6530] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.966663][ T6530] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.978339][ T6530] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.989218][ T6530] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.999466][ T6530] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.008388][ T6530] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.045637][ T6530] ieee80211 phy7: Selected rate control algorithm 'minstrel_ht' [ 125.071462][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.077585][ T6530] ieee80211 phy8: Selected rate control algorithm 'minstrel_ht' [ 125.090442][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.111219][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.119840][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.173786][ T6576] team0: Port device wlan1 added 2026/05/10 09:37:21 executed programs: 636 [ 125.882400][ T5811] Bluetooth: hci1: command tx timeout [ 125.932028][ T6615] validate_nla: 45 callbacks suppressed [ 125.932043][ T6615] netlink: 'syz.0.656': attribute type 10 has an invalid length. [ 125.958247][ T6616] netlink: 'syz.0.657': attribute type 10 has an invalid length. [ 125.989469][ T6617] netlink: 'syz.0.658': attribute type 10 has an invalid length. [ 126.011488][ T6618] netlink: 'syz.0.659': attribute type 10 has an invalid length. [ 126.035127][ T6619] netlink: 'syz.0.660': attribute type 10 has an invalid length. [ 126.059929][ T6620] netlink: 'syz.0.661': attribute type 10 has an invalid length. [ 126.085266][ T6621] netlink: 'syz.0.662': attribute type 10 has an invalid length. [ 126.107612][ T6622] netlink: 'syz.0.663': attribute type 10 has an invalid length. [ 126.132728][ T6623] netlink: 'syz.0.664': attribute type 10 has an invalid length. [ 126.156318][ T6624] netlink: 'syz.0.665': attribute type 10 has an invalid length. [ 127.971998][ T5811] Bluetooth: hci1: command tx timeout [ 130.041969][ T5811] Bluetooth: hci1: command tx timeout 2026/05/10 09:37:26 executed programs: 909 [ 130.949435][ T6889] validate_nla: 264 callbacks suppressed [ 130.949447][ T6889] netlink: 'syz.0.930': attribute type 10 has an invalid length. [ 130.974427][ T6890] netlink: 'syz.0.931': attribute type 10 has an invalid length. [ 130.993441][ T6891] netlink: 'syz.0.932': attribute type 10 has an invalid length. [ 131.011857][ T6892] netlink: 'syz.0.933': attribute type 10 has an invalid length. [ 131.037148][ T6893] netlink: 'syz.0.934': attribute type 10 has an invalid length. [ 131.056116][ T6894] netlink: 'syz.0.935': attribute type 10 has an invalid length. [ 131.075212][ T6895] netlink: 'syz.0.936': attribute type 10 has an invalid length. [ 131.097568][ T6896] netlink: 'syz.0.937': attribute type 10 has an invalid length. [ 131.116596][ T6897] netlink: 'syz.0.938': attribute type 10 has an invalid length. [ 131.135474][ T6898] netlink: 'syz.0.939': attribute type 10 has an invalid length.