Warning: Permanently added '10.128.0.4' (ED25519) to the list of known hosts. 2025/11/09 01:55:26 parsed 1 programs [ 89.055602][ T5791] cgroup: Unknown subsys name 'net' [ 89.196277][ T5791] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 90.943790][ T5791] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.229970][ T787] cfg80211: failed to load regulatory.db [ 93.406901][ T5816] chnl_net:caif_netlink_parms(): no params data found [ 93.485051][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.492378][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.500706][ T5816] bridge_slave_0: entered allmulticast mode [ 93.508619][ T5816] bridge_slave_0: entered promiscuous mode [ 93.518626][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.525921][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.533924][ T5816] bridge_slave_1: entered allmulticast mode [ 93.541169][ T5816] bridge_slave_1: entered promiscuous mode [ 93.578351][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.590427][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.630500][ T5816] team0: Port device team_slave_0 added [ 93.642251][ T5816] team0: Port device team_slave_1 added [ 93.673455][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.680704][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.706695][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.720933][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.728946][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.755468][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.808305][ T5816] hsr_slave_0: entered promiscuous mode [ 93.815093][ T5816] hsr_slave_1: entered promiscuous mode [ 93.993144][ T5816] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.005772][ T5816] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.024502][ T5816] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.034900][ T5816] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.078148][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.085534][ T5816] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.093810][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.101003][ T5816] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.173294][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.193429][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.202340][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.227280][ T5816] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.243521][ T2899] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.250701][ T2899] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.264566][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.271867][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.496715][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.552173][ T5816] veth0_vlan: entered promiscuous mode [ 94.568317][ T5816] veth1_vlan: entered promiscuous mode [ 94.607347][ T5816] veth0_macvtap: entered promiscuous mode [ 94.619691][ T5816] veth1_macvtap: entered promiscuous mode [ 94.645472][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.663513][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.675417][ T5816] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.685174][ T5816] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.694953][ T5816] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.704019][ T5816] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.832974][ T5816] syz-executor (5816) used greatest stack depth: 20648 bytes left [ 94.864578][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.274581][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.286287][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.320378][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.328682][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.256912][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.266546][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.274682][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.283409][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.291914][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 96.299756][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.681724][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2025/11/09 01:55:38 executed programs: 0 [ 98.431691][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.439596][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 98.447366][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 98.456600][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.464905][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 98.473527][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.646369][ T5899] chnl_net:caif_netlink_parms(): no params data found [ 98.719110][ T5899] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.726338][ T5899] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.734266][ T5899] bridge_slave_0: entered allmulticast mode [ 98.741930][ T5899] bridge_slave_0: entered promiscuous mode [ 98.750034][ T5899] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.757140][ T5899] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.764650][ T5899] bridge_slave_1: entered allmulticast mode [ 98.771945][ T5899] bridge_slave_1: entered promiscuous mode [ 98.804583][ T5899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.816523][ T5899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.855098][ T5899] team0: Port device team_slave_0 added [ 98.864129][ T5899] team0: Port device team_slave_1 added [ 98.892779][ T5899] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.900015][ T5899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.926108][ T5899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.939190][ T5899] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.946182][ T5899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.972478][ T5899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.019581][ T5899] hsr_slave_0: entered promiscuous mode [ 99.026241][ T5899] hsr_slave_1: entered promiscuous mode [ 99.033820][ T5899] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.041919][ T5899] Cannot create hsr debugfs directory [ 100.000911][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.084798][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.548712][ T51] Bluetooth: hci0: command tx timeout [ 101.023591][ T11] hsr_slave_0: left promiscuous mode [ 101.031260][ T11] hsr_slave_1: left promiscuous mode [ 101.040403][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.048194][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.057086][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.065296][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.074022][ T11] bridge_slave_1: left allmulticast mode [ 101.082578][ T11] bridge_slave_1: left promiscuous mode [ 101.089628][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.103295][ T11] bridge_slave_0: left allmulticast mode [ 101.110486][ T11] bridge_slave_0: left promiscuous mode [ 101.116413][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.154634][ T11] veth1_macvtap: left promiscuous mode [ 101.162226][ T11] veth0_macvtap: left promiscuous mode [ 101.170637][ T11] veth1_vlan: left promiscuous mode [ 101.176405][ T11] veth0_vlan: left promiscuous mode [ 101.603066][ T11] team0 (unregistering): Port device team_slave_1 removed [ 101.641410][ T11] team0 (unregistering): Port device team_slave_0 removed [ 101.677757][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.716017][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.052170][ T11] bond0 (unregistering): Released all slaves [ 102.180167][ T5899] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 102.191013][ T5899] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 102.201817][ T5899] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 102.213052][ T5899] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 102.323056][ T5899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.355017][ T5899] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.367200][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.374369][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.392681][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.399878][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.452702][ T5899] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 102.631734][ T51] Bluetooth: hci0: command tx timeout [ 102.673078][ T5899] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.754842][ T5899] veth0_vlan: entered promiscuous mode [ 102.769367][ T5899] veth1_vlan: entered promiscuous mode [ 102.830311][ T5899] veth0_macvtap: entered promiscuous mode [ 102.841805][ T5899] veth1_macvtap: entered promiscuous mode [ 102.880336][ T5899] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.894115][ T5899] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.913957][ T5899] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.922968][ T5899] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.932191][ T5899] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.942327][ T5899] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.022724][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.041492][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.070166][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.081962][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.154316][ T5945] netlink: 'syz.0.17': attribute type 10 has an invalid length. [ 103.194814][ T5945] team0: Port device wlan1 added [ 103.316624][ T5948] netlink: 'syz.0.18': attribute type 10 has an invalid length. 2025/11/09 01:55:43 executed programs: 4 [ 103.372916][ T5949] netlink: 'syz.0.19': attribute type 10 has an invalid length. [ 103.497006][ T5950] netlink: 'syz.0.20': attribute type 10 has an invalid length. [ 103.605960][ T5951] netlink: 'syz.0.21': attribute type 10 has an invalid length. [ 103.641988][ T5952] netlink: 'syz.0.22': attribute type 10 has an invalid length. [ 103.723417][ T5953] netlink: 'syz.0.23': attribute type 10 has an invalid length. [ 103.763233][ T5954] netlink: 'syz.0.24': attribute type 10 has an invalid length. [ 103.797433][ T5955] netlink: 'syz.0.25': attribute type 10 has an invalid length. [ 103.878625][ T5956] netlink: 'syz.0.26': attribute type 10 has an invalid length. [ 104.708819][ T51] Bluetooth: hci0: command tx timeout [ 106.789536][ T51] Bluetooth: hci0: command tx timeout [ 108.166034][ T6114] validate_nla: 157 callbacks suppressed [ 108.166048][ T6114] netlink: 'syz.0.184': attribute type 10 has an invalid length. [ 108.201297][ T6115] netlink: 'syz.0.185': attribute type 10 has an invalid length. [ 108.232677][ T6116] netlink: 'syz.0.186': attribute type 10 has an invalid length. [ 108.263179][ T6117] netlink: 'syz.0.187': attribute type 10 has an invalid length. [ 108.294409][ T6118] netlink: 'syz.0.188': attribute type 10 has an invalid length. [ 108.330933][ T6119] netlink: 'syz.0.189': attribute type 10 has an invalid length. 2025/11/09 01:55:48 executed programs: 176 [ 108.371146][ T6120] netlink: 'syz.0.190': attribute type 10 has an invalid length. [ 108.402731][ T6121] netlink: 'syz.0.191': attribute type 10 has an invalid length. [ 108.436283][ T6122] netlink: 'syz.0.192': attribute type 10 has an invalid length. [ 108.467295][ T6123] netlink: 'syz.0.193': attribute type 10 has an invalid length. [ 113.180837][ T6323] validate_nla: 199 callbacks suppressed [ 113.180852][ T6323] netlink: 'syz.0.393': attribute type 10 has an invalid length. [ 113.222000][ T6324] netlink: 'syz.0.394': attribute type 10 has an invalid length. [ 113.249764][ T6325] netlink: 'syz.0.395': attribute type 10 has an invalid length. [ 113.282518][ T6326] netlink: 'syz.0.396': attribute type 10 has an invalid length. [ 113.314108][ T6327] netlink: 'syz.0.397': attribute type 10 has an invalid length. [ 113.352179][ T6328] netlink: 'syz.0.398': attribute type 10 has an invalid length. [ 113.383980][ T6329] netlink: 'syz.0.399': attribute type 10 has an invalid length. 2025/11/09 01:55:53 executed programs: 386 [ 113.411348][ T6330] netlink: 'syz.0.400': attribute type 10 has an invalid length. [ 113.441530][ T6331] netlink: 'syz.0.401': attribute type 10 has an invalid length. [ 113.471890][ T6332] netlink: 'syz.0.402': attribute type 10 has an invalid length. [ 118.193633][ T6536] validate_nla: 202 callbacks suppressed [ 118.193651][ T6536] netlink: 'syz.0.605': attribute type 10 has an invalid length. [ 118.231256][ T6537] netlink: 'syz.0.606': attribute type 10 has an invalid length. [ 118.257469][ T6538] netlink: 'syz.0.607': attribute type 10 has an invalid length. [ 118.284341][ T6539] netlink: 'syz.0.608': attribute type 10 has an invalid length. [ 118.314113][ T6540] netlink: 'syz.0.609': attribute type 10 has an invalid length. [ 118.359569][ T6542] netlink: 'syz.0.610': attribute type 10 has an invalid length. [ 118.395911][ T6543] netlink: 'syz.0.611': attribute type 10 has an invalid length. [ 118.425904][ T6544] netlink: 'syz.0.612': attribute type 10 has an invalid length. [ 118.455652][ T6545] netlink: 'syz.0.613': attribute type 10 has an invalid length. 2025/11/09 01:55:58 executed programs: 598 [ 118.484899][ T6546] netlink: 'syz.0.614': attribute type 10 has an invalid length. [ 118.588738][ T5100] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 118.598468][ T5100] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 118.607094][ T5100] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 118.615843][ T5100] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 118.630022][ T5100] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 118.644063][ T5100] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 118.821965][ T6550] chnl_net:caif_netlink_parms(): no params data found [ 118.919490][ T5947] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.935887][ T6550] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.943615][ T6550] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.951019][ T6550] bridge_slave_0: entered allmulticast mode [ 118.958267][ T6550] bridge_slave_0: entered promiscuous mode [ 118.966853][ T6550] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.974285][ T6550] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.981745][ T6550] bridge_slave_1: entered allmulticast mode [ 118.989486][ T6550] bridge_slave_1: entered promiscuous mode [ 119.007123][ T5947] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.046107][ T6550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.058011][ T6550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.091261][ T5947] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.122233][ T6550] team0: Port device team_slave_0 added [ 119.131250][ T6550] team0: Port device team_slave_1 added [ 119.174029][ T5947] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.192533][ T6550] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.200260][ T6550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.226922][ T6550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.239466][ T6550] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.246621][ T6550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.273387][ T6550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.328876][ T6550] hsr_slave_0: entered promiscuous mode [ 119.335561][ T6550] hsr_slave_1: entered promiscuous mode [ 120.156087][ T6550] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 120.167879][ T6550] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 120.189705][ T5947] [ 120.192097][ T5947] ====================================================== [ 120.199142][ T5947] WARNING: possible circular locking dependency detected [ 120.206197][ T5947] syzkaller #0 Not tainted [ 120.210627][ T5947] ------------------------------------------------------ [ 120.217667][ T5947] kworker/u4:9/5947 is trying to acquire lock: [ 120.223821][ T5947] ffff888020f24d00 (team->team_lock_key#2){+.+.}-{3:3}, at: team_del_slave+0x32/0x1c0 [ 120.233426][ T5947] [ 120.233426][ T5947] but task is already holding lock: [ 120.240794][ T5947] ffff888028aa8768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x292/0x680 [ 120.251168][ T5947] [ 120.251168][ T5947] which lock already depends on the new lock. [ 120.251168][ T5947] [ 120.261578][ T5947] [ 120.261578][ T5947] the existing dependency chain (in reverse order) is: [ 120.270593][ T5947] [ 120.270593][ T5947] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 120.278332][ T5947] __mutex_lock+0x129/0xcc0 [ 120.283375][ T5947] ieee80211_open+0x144/0x200 [ 120.288589][ T5947] __dev_open+0x2bc/0x430 [ 120.293441][ T5947] dev_open+0xab/0x170 [ 120.298035][ T5947] team_add_slave+0xae7/0x2660 [ 120.303330][ T5947] do_setlink+0xe14/0x3fb0 [ 120.308273][ T5947] rtnl_newlink+0x175b/0x2020 [ 120.313512][ T5947] rtnetlink_rcv_msg+0x7c7/0xf10 [ 120.318982][ T5947] netlink_rcv_skb+0x216/0x480 [ 120.324277][ T5947] netlink_unicast+0x751/0x8d0 [ 120.329599][ T5947] netlink_sendmsg+0x8c1/0xbe0 [ 120.334894][ T5947] ____sys_sendmsg+0x5bf/0x950 [ 120.340192][ T5947] ___sys_sendmsg+0x220/0x290 [ 120.345406][ T5947] __se_sys_sendmsg+0x1a5/0x270 [ 120.350800][ T5947] do_syscall_64+0x55/0xb0 [ 120.355748][ T5947] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 120.362199][ T5947] [ 120.362199][ T5947] -> #0 (team->team_lock_key#2){+.+.}-{3:3}: [ 120.370382][ T5947] __lock_acquire+0x2ddb/0x7c80 [ 120.375937][ T5947] lock_acquire+0x197/0x410 [ 120.380966][ T5947] __mutex_lock+0x129/0xcc0 [ 120.386001][ T5947] team_del_slave+0x32/0x1c0 [ 120.391115][ T5947] team_device_event+0x28d/0xa20 [ 120.396580][ T5947] notifier_call_chain+0x197/0x390 [ 120.402221][ T5947] unregister_netdevice_many_notify+0xf36/0x1810 [ 120.409087][ T5947] unregister_netdevice_queue+0x324/0x360 [ 120.415342][ T5947] _cfg80211_unregister_wdev+0x16b/0x580 [ 120.421512][ T5947] ieee80211_remove_interfaces+0x496/0x680 [ 120.427940][ T5947] ieee80211_unregister_hw+0x5d/0x2a0 [ 120.433847][ T5947] mac80211_hwsim_del_radio+0x274/0x450 [ 120.439919][ T5947] hwsim_exit_net+0x585/0x640 [ 120.445129][ T5947] cleanup_net+0x6f4/0xb90 [ 120.450080][ T5947] process_scheduled_works+0xa45/0x15b0 [ 120.456155][ T5947] worker_thread+0xa55/0xfc0 [ 120.461364][ T5947] kthread+0x2fa/0x390 [ 120.465958][ T5947] ret_from_fork+0x48/0x80 [ 120.470909][ T5947] ret_from_fork_asm+0x11/0x20 [ 120.476210][ T5947] [ 120.476210][ T5947] other info that might help us debug this: [ 120.476210][ T5947] [ 120.486442][ T5947] Possible unsafe locking scenario: [ 120.486442][ T5947] [ 120.493892][ T5947] CPU0 CPU1 [ 120.499261][ T5947] ---- ---- [ 120.504645][ T5947] lock(&rdev->wiphy.mtx); [ 120.509157][ T5947] lock(team->team_lock_key#2); [ 120.516635][ T5947] lock(&rdev->wiphy.mtx); [ 120.523924][ T5947] lock(team->team_lock_key#2); [ 120.528876][ T5947] [ 120.528876][ T5947] *** DEADLOCK *** [ 120.528876][ T5947] [ 120.537281][ T5947] 5 locks held by kworker/u4:9/5947: [ 120.542564][ T5947] #0: ffff888017873938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 120.553455][ T5947] #1: ffffc90003387d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 120.564003][ T5947] #2: ffffffff8dfaeed0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x136/0xb90 [ 120.573512][ T5947] #3: ffffffff8dfbbd08 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0 [ 120.583366][ T5947] #4: ffff888028aa8768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x292/0x680 [ 120.594193][ T5947] [ 120.594193][ T5947] stack backtrace: [ 120.600099][ T5947] CPU: 0 PID: 5947 Comm: kworker/u4:9 Not tainted syzkaller #0 [ 120.607649][ T5947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 120.617716][ T5947] Workqueue: netns cleanup_net [ 120.622521][ T5947] Call Trace: [ 120.625809][ T5947] [ 120.628757][ T5947] dump_stack_lvl+0x16c/0x230 [ 120.633455][ T5947] ? load_image+0x3b0/0x3b0 [ 120.637971][ T5947] ? show_regs_print_info+0x20/0x20 [ 120.643189][ T5947] ? print_circular_bug+0x12b/0x1a0 [ 120.648400][ T5947] check_noncircular+0x2bd/0x3c0 [ 120.653352][ T5947] ? print_deadlock_bug+0x5d0/0x5d0 [ 120.658567][ T5947] ? lockdep_lock+0xe0/0x220 [ 120.663168][ T5947] ? __lock_acquire+0x1334/0x7c80 [ 120.668207][ T5947] ? _find_first_zero_bit+0xd3/0x100 [ 120.673513][ T5947] __lock_acquire+0x2ddb/0x7c80 [ 120.678388][ T5947] ? verify_lock_unused+0x140/0x140 [ 120.683602][ T5947] ? verify_lock_unused+0x140/0x140 [ 120.688818][ T5947] lock_acquire+0x197/0x410 [ 120.693332][ T5947] ? team_del_slave+0x32/0x1c0 [ 120.698125][ T5947] ? __might_sleep+0xe0/0xe0 [ 120.702726][ T5947] ? read_lock_is_recursive+0x20/0x20 [ 120.708112][ T5947] __mutex_lock+0x129/0xcc0 [ 120.712634][ T5947] ? team_del_slave+0x32/0x1c0 [ 120.717407][ T5947] ? __lock_acquire+0x7c80/0x7c80 [ 120.722579][ T5947] ? rcu_is_watching+0x15/0xb0 [ 120.727355][ T5947] ? trace_contention_end+0x39/0xe0 [ 120.732586][ T5947] ? __mutex_lock+0x304/0xcc0 [ 120.737276][ T5947] ? team_del_slave+0x32/0x1c0 [ 120.742059][ T5947] ? mutex_lock_nested+0x20/0x20 [ 120.747014][ T5947] ? bond_netdev_event+0xe1/0xef0 [ 120.752047][ T5947] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 120.757699][ T5947] ? bond_ipsec_offload_ok+0x410/0x410 [ 120.763169][ T5947] team_del_slave+0x32/0x1c0 [ 120.767769][ T5947] team_device_event+0x28d/0xa20 [ 120.772741][ T5947] notifier_call_chain+0x197/0x390 [ 120.777880][ T5947] unregister_netdevice_many_notify+0xf36/0x1810 [ 120.784225][ T5947] ? lock_chain_count+0x20/0x20 [ 120.789101][ T5947] ? unregister_netdevice_many+0x20/0x20 [ 120.794793][ T5947] ? kernfs_remove_by_name_ns+0x117/0x150 [ 120.800536][ T5947] ? __lock_acquire+0x7c80/0x7c80 [ 120.805580][ T5947] unregister_netdevice_queue+0x324/0x360 [ 120.811321][ T5947] ? list_netdevice+0x730/0x730 [ 120.816185][ T5947] ? kernfs_remove_by_name_ns+0x117/0x150 [ 120.821947][ T5947] _cfg80211_unregister_wdev+0x16b/0x580 [ 120.827602][ T5947] ieee80211_remove_interfaces+0x496/0x680 [ 120.833429][ T5947] ? ieee80211_do_stop+0x1db0/0x1db0 [ 120.838739][ T5947] ? rcu_is_watching+0x15/0xb0 [ 120.843520][ T5947] ieee80211_unregister_hw+0x5d/0x2a0 [ 120.848914][ T5947] mac80211_hwsim_del_radio+0x274/0x450 [ 120.854476][ T5947] ? rhashtable_remove_fast+0xbf0/0xbf0 [ 120.860034][ T5947] hwsim_exit_net+0x585/0x640 [ 120.864748][ T5947] ? hwsim_init_net+0x90/0x90 [ 120.869443][ T5947] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 120.875267][ T5947] cleanup_net+0x6f4/0xb90 [ 120.879705][ T5947] ? ops_free_list+0x3b0/0x3b0 [ 120.884495][ T5947] ? _raw_spin_unlock_irq+0x23/0x50 [ 120.889741][ T5947] ? process_scheduled_works+0x957/0x15b0 [ 120.895499][ T5947] ? process_scheduled_works+0x957/0x15b0 [ 120.901247][ T5947] process_scheduled_works+0xa45/0x15b0 [ 120.906822][ T5947] ? assign_work+0x400/0x400 [ 120.911437][ T5947] ? assign_work+0x39e/0x400 [ 120.916045][ T5947] worker_thread+0xa55/0xfc0 [ 120.920656][ T5947] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 120.926571][ T5947] ? _raw_spin_unlock+0x40/0x40 [ 120.931428][ T5947] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 120.937353][ T5947] kthread+0x2fa/0x390 [ 120.941482][ T5947] ? pr_cont_work+0x560/0x560 [ 120.946180][ T5947] ? kthread_blkcg+0xd0/0xd0 [ 120.950791][ T5947] ret_from_fork+0x48/0x80 [ 120.955323][ T5947] ? kthread_blkcg+0xd0/0xd0 [ 120.959927][ T5947] ret_from_fork_asm+0x11/0x20 [ 120.964719][ T5947] [ 120.968291][ T51] Bluetooth: hci1: command tx timeout [ 120.975076][ T5947] team0: Port device wlan1 removed [ 120.985527][ T6550] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 120.995885][ T6550] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 121.110624][ T5947] hsr_slave_0: left promiscuous mode [ 121.116657][ T5947] hsr_slave_1: left promiscuous mode [ 121.123966][ T5947] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.132530][ T5947] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.140652][ T5947] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.152605][ T5947] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.160951][ T5947] bridge_slave_1: left allmulticast mode [ 121.166630][ T5947] bridge_slave_1: left promiscuous mode [ 121.172466][ T5947] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.181611][ T5947] bridge_slave_0: left allmulticast mode [ 121.187306][ T5947] bridge_slave_0: left promiscuous mode [ 121.193358][ T5947] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.205879][ T5947] veth1_macvtap: left promiscuous mode [ 121.211549][ T5947] veth0_macvtap: left promiscuous mode [ 121.217188][ T5947] veth1_vlan: left promiscuous mode [ 121.223349][ T5947] veth0_vlan: left promiscuous mode [ 121.462418][ T5947] team0 (unregistering): Port device team_slave_1 removed [ 121.484163][ T5947] team0 (unregistering): Port device team_slave_0 removed [ 121.505149][ T5947] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.529813][ T5947] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.635519][ T5947] bond0 (unregistering): Released all slaves [ 121.714029][ T6550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.730790][ T6550] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.750600][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.757802][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.774724][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.781893][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.950211][ T6550] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.995854][ T6550] veth0_vlan: entered promiscuous mode [ 122.010350][ T6550] veth1_vlan: entered promiscuous mode [ 122.038877][ T6550] veth0_macvtap: entered promiscuous mode [ 122.048496][ T6550] veth1_macvtap: entered promiscuous mode [ 122.065213][ T6550] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.079572][ T6550] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.091037][ T6550] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.101169][ T6550] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.110213][ T6550] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.119468][ T6550] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.148693][ T6550] ieee80211 phy7: Selected rate control algorithm 'minstrel_ht' [ 122.170542][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.172633][ T6550] ieee80211 phy8: Selected rate control algorithm 'minstrel_ht' [ 122.187819][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.210412][ T5947] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.218355][ T5947] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.267170][ T6599] team0: Port device wlan1 added [ 123.027767][ T51] Bluetooth: hci1: command tx timeout [ 123.206104][ T6648] validate_nla: 51 callbacks suppressed [ 123.206117][ T6648] netlink: 'syz.0.666': attribute type 10 has an invalid length. [ 123.236609][ T6649] netlink: 'syz.0.667': attribute type 10 has an invalid length. [ 123.259667][ T6650] netlink: 'syz.0.668': attribute type 10 has an invalid length. [ 123.284686][ T6651] netlink: 'syz.0.669': attribute type 10 has an invalid length. [ 123.313178][ T6652] netlink: 'syz.0.670': attribute type 10 has an invalid length. [ 123.336263][ T6653] netlink: 'syz.0.671': attribute type 10 has an invalid length. [ 123.357265][ T6654] netlink: 'syz.0.672': attribute type 10 has an invalid length. [ 123.385945][ T6655] netlink: 'syz.0.673': attribute type 10 has an invalid length. [ 123.409500][ T6656] netlink: 'syz.0.674': attribute type 10 has an invalid length. [ 123.436496][ T6657] netlink: 'syz.0.675': attribute type 10 has an invalid length. 2025/11/09 01:56:03 executed programs: 664 [ 125.107919][ T51] Bluetooth: hci1: command tx timeout [ 127.187942][ T51] Bluetooth: hci1: command tx timeout [ 128.227044][ T6915] validate_nla: 257 callbacks suppressed [ 128.227062][ T6915] netlink: 'syz.0.933': attribute type 10 has an invalid length. [ 128.257307][ T6916] netlink: 'syz.0.934': attribute type 10 has an invalid length. [ 128.278440][ T6917] netlink: 'syz.0.935': attribute type 10 has an invalid length. [ 128.300100][ T6918] netlink: 'syz.0.936': attribute type 10 has an invalid length. [ 128.323362][ T6919] netlink: 'syz.0.937': attribute type 10 has an invalid length. [ 128.345809][ T6920] netlink: 'syz.0.938': attribute type 10 has an invalid length. [ 128.368761][ T6921] netlink: 'syz.0.939': attribute type 10 has an invalid length. [ 128.392057][ T6922] netlink: 'syz.0.940': attribute type 10 has an invalid length. [ 128.416311][ T6923] netlink: 'syz.0.941': attribute type 10 has an invalid length. [ 128.444156][ T6924] netlink: 'syz.0.942': attribute type 10 has an invalid length. 2025/11/09 01:56:08 executed programs: 932