Warning: Permanently added '10.128.1.6' (ED25519) to the list of known hosts. 2026/05/31 23:22:28 parsed 1 programs [ 88.379521][ T5790] cgroup: Unknown subsys name 'net' [ 88.519230][ T5790] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 90.292371][ T5790] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.230614][ T1205] cfg80211: failed to load regulatory.db [ 93.111589][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 93.207096][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.215245][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.222854][ T5827] bridge_slave_0: entered allmulticast mode [ 93.231186][ T5827] bridge_slave_0: entered promiscuous mode [ 93.241620][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.249290][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.257628][ T5827] bridge_slave_1: entered allmulticast mode [ 93.265078][ T5827] bridge_slave_1: entered promiscuous mode [ 93.300340][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.314511][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.346984][ T5827] team0: Port device team_slave_0 added [ 93.355990][ T5827] team0: Port device team_slave_1 added [ 93.382739][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.389728][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.416027][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.429328][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.436414][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.462393][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.534597][ T5827] hsr_slave_0: entered promiscuous mode [ 93.546399][ T5827] hsr_slave_1: entered promiscuous mode [ 93.743471][ T5827] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.755799][ T5827] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.767369][ T5827] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.792867][ T5827] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.903181][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.928141][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.955382][ T149] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.963210][ T149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.978864][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.986101][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.252219][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.313697][ T5827] veth0_vlan: entered promiscuous mode [ 94.327333][ T5827] veth1_vlan: entered promiscuous mode [ 94.368365][ T5827] veth0_macvtap: entered promiscuous mode [ 94.380548][ T5827] veth1_macvtap: entered promiscuous mode [ 94.402882][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.416715][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.429034][ T5827] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.438609][ T5827] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.447851][ T5827] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.457031][ T5827] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.611632][ T5827] syz-executor (5827) used greatest stack depth: 19976 bytes left [ 94.656934][ T1325] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.110796][ T5882] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.119622][ T5882] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.129721][ T5882] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.138264][ T5882] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.146199][ T5882] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 97.154695][ T5882] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.248626][ T1325] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.464376][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.475465][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.507742][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.516426][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/05/31 23:22:40 executed programs: 0 [ 98.189215][ T5882] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.201113][ T5882] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 98.210253][ T5882] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 98.219294][ T5882] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.229512][ T5882] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 98.237084][ T5882] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.400593][ T5896] chnl_net:caif_netlink_parms(): no params data found [ 98.474336][ T5896] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.481848][ T5896] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.489087][ T5896] bridge_slave_0: entered allmulticast mode [ 98.497005][ T5896] bridge_slave_0: entered promiscuous mode [ 98.506212][ T5896] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.514038][ T5896] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.521523][ T5896] bridge_slave_1: entered allmulticast mode [ 98.528587][ T5896] bridge_slave_1: entered promiscuous mode [ 98.560861][ T5896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.573575][ T5896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.604976][ T5896] team0: Port device team_slave_0 added [ 98.615537][ T5896] team0: Port device team_slave_1 added [ 98.647101][ T5896] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.654197][ T5896] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.680579][ T5896] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.693151][ T5896] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.700494][ T5896] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.726753][ T5896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.771462][ T5896] hsr_slave_0: entered promiscuous mode [ 98.778374][ T5896] hsr_slave_1: entered promiscuous mode [ 98.785990][ T5896] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.794231][ T5896] Cannot create hsr debugfs directory [ 99.600374][ T1325] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.667544][ T1325] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.301350][ T5882] Bluetooth: hci0: command tx timeout [ 100.623564][ T5896] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 100.647011][ T1325] hsr_slave_0: left promiscuous mode [ 100.653429][ T1325] hsr_slave_1: left promiscuous mode [ 100.660390][ T1325] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.667906][ T1325] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.677966][ T1325] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.685564][ T1325] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.694969][ T1325] bridge_slave_1: left allmulticast mode [ 100.701147][ T1325] bridge_slave_1: left promiscuous mode [ 100.707904][ T1325] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.722695][ T1325] bridge_slave_0: left allmulticast mode [ 100.728432][ T1325] bridge_slave_0: left promiscuous mode [ 100.734691][ T1325] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.763682][ T1325] veth1_macvtap: left promiscuous mode [ 100.770328][ T1325] veth0_macvtap: left promiscuous mode [ 100.777660][ T1325] veth1_vlan: left promiscuous mode [ 100.785071][ T1325] veth0_vlan: left promiscuous mode [ 101.354766][ T1325] team0 (unregistering): Port device team_slave_1 removed [ 101.391858][ T1325] team0 (unregistering): Port device team_slave_0 removed [ 101.428510][ T1325] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.467285][ T1325] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.739673][ T1325] bond0 (unregistering): Released all slaves [ 101.826557][ T5896] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 101.837619][ T5896] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 101.848455][ T5896] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 101.984828][ T5896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.014145][ T5896] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.027451][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.034626][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.049886][ T1316] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.057091][ T1316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.397810][ T5882] Bluetooth: hci0: command tx timeout [ 102.411887][ T5896] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.495968][ T5896] veth0_vlan: entered promiscuous mode [ 102.521499][ T5896] veth1_vlan: entered promiscuous mode [ 102.564609][ T5896] veth0_macvtap: entered promiscuous mode [ 102.574409][ T5896] veth1_macvtap: entered promiscuous mode [ 102.595399][ T5896] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.611883][ T5896] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.624914][ T5896] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.634415][ T5896] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.643595][ T5896] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.652698][ T5896] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.719081][ T1316] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.732056][ T1316] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.762587][ T1316] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.770711][ T1316] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.839605][ T5937] netlink: 'syz.0.17': attribute type 10 has an invalid length. [ 102.888377][ T5937] team0: Port device wlan1 added [ 102.910356][ T5937] syz.0.17 (5937) used greatest stack depth: 19888 bytes left [ 102.983188][ T5938] netlink: 'syz.0.18': attribute type 10 has an invalid length. 2026/05/31 23:22:45 executed programs: 5 [ 103.112635][ T5939] netlink: 'syz.0.19': attribute type 10 has an invalid length. [ 103.248372][ T5940] netlink: 'syz.0.20': attribute type 10 has an invalid length. [ 103.379232][ T5941] netlink: 'syz.0.21': attribute type 10 has an invalid length. [ 103.488161][ T5942] netlink: 'syz.0.22': attribute type 10 has an invalid length. [ 103.526793][ T5943] netlink: 'syz.0.23': attribute type 10 has an invalid length. [ 103.616822][ T5944] netlink: 'syz.0.24': attribute type 10 has an invalid length. [ 103.696290][ T5945] netlink: 'syz.0.25': attribute type 10 has an invalid length. [ 103.782466][ T5946] netlink: 'syz.0.26': attribute type 10 has an invalid length. [ 104.460284][ T5882] Bluetooth: hci0: command tx timeout [ 106.550214][ T5882] Bluetooth: hci0: command tx timeout [ 107.844954][ T6094] validate_nla: 147 callbacks suppressed [ 107.844971][ T6094] netlink: 'syz.0.174': attribute type 10 has an invalid length. [ 107.898180][ T6095] netlink: 'syz.0.175': attribute type 10 has an invalid length. [ 107.933304][ T6096] netlink: 'syz.0.176': attribute type 10 has an invalid length. [ 107.964396][ T6097] netlink: 'syz.0.177': attribute type 10 has an invalid length. [ 108.004466][ T6098] netlink: 'syz.0.178': attribute type 10 has an invalid length. [ 108.032547][ T6099] netlink: 'syz.0.179': attribute type 10 has an invalid length. [ 108.079573][ T6100] netlink: 'syz.0.180': attribute type 10 has an invalid length. [ 108.111935][ T6101] netlink: 'syz.0.181': attribute type 10 has an invalid length. 2026/05/31 23:22:50 executed programs: 168 [ 108.153732][ T6102] netlink: 'syz.0.182': attribute type 10 has an invalid length. [ 108.184002][ T6103] netlink: 'syz.0.183': attribute type 10 has an invalid length. [ 112.870283][ T6293] validate_nla: 189 callbacks suppressed [ 112.870301][ T6293] netlink: 'syz.0.373': attribute type 10 has an invalid length. [ 112.906936][ T6294] netlink: 'syz.0.374': attribute type 10 has an invalid length. [ 112.936492][ T6295] netlink: 'syz.0.375': attribute type 10 has an invalid length. [ 112.966954][ T6296] netlink: 'syz.0.376': attribute type 10 has an invalid length. [ 113.003006][ T6297] netlink: 'syz.0.377': attribute type 10 has an invalid length. [ 113.031398][ T6298] netlink: 'syz.0.378': attribute type 10 has an invalid length. [ 113.060449][ T6299] netlink: 'syz.0.379': attribute type 10 has an invalid length. [ 113.093474][ T6300] netlink: 'syz.0.380': attribute type 10 has an invalid length. [ 113.126346][ T6301] netlink: 'syz.0.381': attribute type 10 has an invalid length. [ 113.165506][ T6302] netlink: 'syz.0.382': attribute type 10 has an invalid length. 2026/05/31 23:22:55 executed programs: 368 [ 117.885300][ T6531] validate_nla: 228 callbacks suppressed [ 117.885314][ T6531] netlink: 'syz.0.611': attribute type 10 has an invalid length. [ 117.919669][ T6533] netlink: 'syz.0.612': attribute type 10 has an invalid length. [ 117.945456][ T6534] netlink: 'syz.0.613': attribute type 10 has an invalid length. [ 117.967501][ T6535] netlink: 'syz.0.614': attribute type 10 has an invalid length. [ 117.993589][ T6536] netlink: 'syz.0.615': attribute type 10 has an invalid length. [ 118.016226][ T6537] netlink: 'syz.0.616': attribute type 10 has an invalid length. [ 118.117631][ T5088] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 118.126256][ T5088] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 118.134787][ T5088] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 118.143876][ T5088] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 118.152756][ T5088] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 118.160932][ T5088] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 118.305043][ T6540] chnl_net:caif_netlink_parms(): no params data found [ 118.367893][ T1316] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.414859][ T6540] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.423540][ T6540] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.431309][ T6540] bridge_slave_0: entered allmulticast mode [ 118.438555][ T6540] bridge_slave_0: entered promiscuous mode [ 118.456824][ T1316] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.473986][ T6540] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.481625][ T6540] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.488864][ T6540] bridge_slave_1: entered allmulticast mode [ 118.497272][ T6540] bridge_slave_1: entered promiscuous mode [ 118.526160][ T1316] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.557586][ T6540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.570912][ T6540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.603172][ T1316] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.632318][ T6540] team0: Port device team_slave_0 added [ 118.641446][ T6540] team0: Port device team_slave_1 added [ 118.667522][ T6540] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.674993][ T6540] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.701159][ T6540] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.714262][ T6540] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.721401][ T6540] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.747439][ T6540] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.797720][ T6540] hsr_slave_0: entered promiscuous mode [ 118.804703][ T6540] hsr_slave_1: entered promiscuous mode [ 119.653450][ T6540] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 119.663907][ T6540] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 119.679768][ T6540] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 119.713837][ T6540] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 119.764250][ T1316] [ 119.766657][ T1316] ====================================================== [ 119.773798][ T1316] WARNING: possible circular locking dependency detected [ 119.780959][ T1316] syzkaller #0 Not tainted [ 119.785415][ T1316] ------------------------------------------------------ [ 119.792470][ T1316] kworker/u4:7/1316 is trying to acquire lock: [ 119.798661][ T1316] ffff88806d9c4d00 (team->team_lock_key#2){+.+.}-{3:3}, at: team_del_slave+0x32/0x1c0 [ 119.808340][ T1316] [ 119.808340][ T1316] but task is already holding lock: [ 119.815740][ T1316] ffff88807f920768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x29a/0x690 [ 119.826179][ T1316] [ 119.826179][ T1316] which lock already depends on the new lock. [ 119.826179][ T1316] [ 119.836622][ T1316] [ 119.836622][ T1316] the existing dependency chain (in reverse order) is: [ 119.845669][ T1316] [ 119.845669][ T1316] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 119.853459][ T1316] __mutex_lock+0x136/0xcc0 [ 119.858531][ T1316] ieee80211_open+0x144/0x200 [ 119.863782][ T1316] __dev_open+0x2cb/0x430 [ 119.868685][ T1316] dev_open+0xab/0x190 [ 119.873322][ T1316] team_add_slave+0x75f/0x29a0 [ 119.878663][ T1316] do_setlink+0xdfe/0x4130 [ 119.883653][ T1316] rtnl_newlink+0x17da/0x20a0 [ 119.888898][ T1316] rtnetlink_rcv_msg+0x869/0xfa0 [ 119.894408][ T1316] netlink_rcv_skb+0x241/0x4d0 [ 119.899740][ T1316] netlink_unicast+0x751/0x8d0 [ 119.905084][ T1316] netlink_sendmsg+0x8d0/0xbf0 [ 119.910415][ T1316] ____sys_sendmsg+0x5ba/0x960 [ 119.915741][ T1316] ___sys_sendmsg+0x2a6/0x360 [ 119.920984][ T1316] __se_sys_sendmsg+0x1c2/0x2b0 [ 119.926408][ T1316] do_syscall_64+0x55/0xb0 [ 119.931396][ T1316] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 119.937871][ T1316] [ 119.937871][ T1316] -> #0 (team->team_lock_key#2){+.+.}-{3:3}: [ 119.946102][ T1316] __lock_acquire+0x2df1/0x7d40 [ 119.951538][ T1316] lock_acquire+0x19e/0x420 [ 119.956615][ T1316] __mutex_lock+0x136/0xcc0 [ 119.961693][ T1316] team_del_slave+0x32/0x1c0 [ 119.966856][ T1316] team_device_event+0x28d/0xa20 [ 119.972364][ T1316] notifier_call_chain+0x197/0x380 [ 119.978051][ T1316] unregister_netdevice_many_notify+0x100d/0x1900 [ 119.985043][ T1316] unregister_netdevice_queue+0x32c/0x370 [ 119.991338][ T1316] _cfg80211_unregister_wdev+0x16b/0x580 [ 119.997559][ T1316] ieee80211_remove_interfaces+0x49e/0x690 [ 120.003944][ T1316] ieee80211_unregister_hw+0x5d/0x2a0 [ 120.009882][ T1316] mac80211_hwsim_del_radio+0x289/0x480 [ 120.015994][ T1316] hwsim_exit_net+0x58d/0x650 [ 120.021239][ T1316] cleanup_net+0x70a/0xbb0 [ 120.026301][ T1316] process_scheduled_works+0xa5d/0x15d0 [ 120.032417][ T1316] worker_thread+0xa55/0xfc0 [ 120.037575][ T1316] kthread+0x2fa/0x390 [ 120.042216][ T1316] ret_from_fork+0x48/0x80 [ 120.047289][ T1316] ret_from_fork_asm+0x11/0x20 [ 120.052710][ T1316] [ 120.052710][ T1316] other info that might help us debug this: [ 120.052710][ T1316] [ 120.062977][ T1316] Possible unsafe locking scenario: [ 120.062977][ T1316] [ 120.070470][ T1316] CPU0 CPU1 [ 120.075875][ T1316] ---- ---- [ 120.081281][ T1316] lock(&rdev->wiphy.mtx); [ 120.085835][ T1316] lock(team->team_lock_key#2); [ 120.093345][ T1316] lock(&rdev->wiphy.mtx); [ 120.100504][ T1316] lock(team->team_lock_key#2); [ 120.105501][ T1316] [ 120.105501][ T1316] *** DEADLOCK *** [ 120.105501][ T1316] [ 120.113679][ T1316] 5 locks held by kworker/u4:7/1316: [ 120.119001][ T1316] #0: ffff88801a254938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 120.129951][ T1316] #1: ffffc90004e9fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 120.140818][ T1316] #2: ffffffff8e3b8850 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x14c/0xbb0 [ 120.150305][ T1316] #3: ffffffff8e3c5848 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0 [ 120.160215][ T1316] #4: ffff88807f920768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x29a/0x690 [ 120.171079][ T1316] [ 120.171079][ T1316] stack backtrace: [ 120.177028][ T1316] CPU: 1 PID: 1316 Comm: kworker/u4:7 Not tainted syzkaller #0 [ 120.184618][ T1316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 120.194719][ T1316] Workqueue: netns cleanup_net [ 120.199557][ T1316] Call Trace: [ 120.202885][ T1316] [ 120.205854][ T1316] dump_stack_lvl+0x18c/0x250 [ 120.210588][ T1316] ? load_image+0x420/0x420 [ 120.215138][ T1316] ? show_regs_print_info+0x20/0x20 [ 120.220393][ T1316] ? print_circular_bug+0x12b/0x1a0 [ 120.225648][ T1316] check_noncircular+0x2fc/0x400 [ 120.230650][ T1316] ? print_deadlock_bug+0x5d0/0x5d0 [ 120.235993][ T1316] ? lockdep_lock+0xf5/0x230 [ 120.240639][ T1316] ? __lock_acquire+0x1273/0x7d40 [ 120.245714][ T1316] ? _find_first_zero_bit+0xd3/0x100 [ 120.251046][ T1316] __lock_acquire+0x2df1/0x7d40 [ 120.255962][ T1316] ? verify_lock_unused+0x140/0x140 [ 120.261221][ T1316] ? verify_lock_unused+0x140/0x140 [ 120.266480][ T1316] lock_acquire+0x19e/0x420 [ 120.271029][ T1316] ? team_del_slave+0x32/0x1c0 [ 120.275850][ T1316] ? __might_sleep+0xe0/0xe0 [ 120.280486][ T1316] ? read_lock_is_recursive+0x20/0x20 [ 120.285910][ T1316] __mutex_lock+0x136/0xcc0 [ 120.290465][ T1316] ? team_del_slave+0x32/0x1c0 [ 120.295280][ T1316] ? __lock_acquire+0x7d40/0x7d40 [ 120.300525][ T1316] ? rcu_is_watching+0x15/0xb0 [ 120.305339][ T1316] ? trace_contention_end+0x39/0xe0 [ 120.310577][ T1316] ? __mutex_lock+0x315/0xcc0 [ 120.315301][ T1316] ? team_del_slave+0x32/0x1c0 [ 120.320107][ T1316] ? mutex_lock_nested+0x20/0x20 [ 120.325094][ T1316] ? bond_netdev_event+0xeb/0xf20 [ 120.330166][ T1316] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 120.335862][ T1316] team_del_slave+0x32/0x1c0 [ 120.340499][ T1316] team_device_event+0x28d/0xa20 [ 120.345490][ T1316] notifier_call_chain+0x197/0x380 [ 120.350655][ T1316] unregister_netdevice_many_notify+0x100d/0x1900 [ 120.357128][ T1316] ? lock_chain_count+0x20/0x20 [ 120.362042][ T1316] ? unregister_netdevice_many+0x20/0x20 [ 120.367729][ T1316] ? kernfs_remove_by_name_ns+0x117/0x150 [ 120.373511][ T1316] ? __lock_acquire+0x7d40/0x7d40 [ 120.378588][ T1316] unregister_netdevice_queue+0x32c/0x370 [ 120.384351][ T1316] ? list_netdevice+0x730/0x730 [ 120.389253][ T1316] ? kernfs_remove_by_name_ns+0x117/0x150 [ 120.395047][ T1316] _cfg80211_unregister_wdev+0x16b/0x580 [ 120.400733][ T1316] ieee80211_remove_interfaces+0x49e/0x690 [ 120.406596][ T1316] ? ieee80211_do_stop+0x1e20/0x1e20 [ 120.411931][ T1316] ? rcu_is_watching+0x15/0xb0 [ 120.416749][ T1316] ieee80211_unregister_hw+0x5d/0x2a0 [ 120.422178][ T1316] mac80211_hwsim_del_radio+0x289/0x480 [ 120.427778][ T1316] ? rhashtable_remove_fast+0xc00/0xc00 [ 120.433389][ T1316] hwsim_exit_net+0x58d/0x650 [ 120.438114][ T1316] ? hwsim_init_net+0x90/0x90 [ 120.442839][ T1316] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 120.448690][ T1316] cleanup_net+0x70a/0xbb0 [ 120.453120][ T1316] ? ops_free_list+0x3b0/0x3b0 [ 120.457896][ T1316] ? _raw_spin_unlock_irq+0x23/0x50 [ 120.463108][ T1316] ? process_scheduled_works+0x96f/0x15d0 [ 120.468840][ T1316] ? process_scheduled_works+0x96f/0x15d0 [ 120.474576][ T1316] process_scheduled_works+0xa5d/0x15d0 [ 120.480175][ T1316] ? worker_attach_to_pool+0x380/0x380 [ 120.485651][ T1316] ? assign_work+0x3d2/0x5d0 [ 120.490276][ T1316] worker_thread+0xa55/0xfc0 [ 120.494910][ T1316] kthread+0x2fa/0x390 [ 120.498986][ T1316] ? pr_cont_work+0x560/0x560 [ 120.503675][ T1316] ? kthread_blkcg+0xd0/0xd0 [ 120.508299][ T1316] ret_from_fork+0x48/0x80 [ 120.512750][ T1316] ? kthread_blkcg+0xd0/0xd0 [ 120.517350][ T1316] ret_from_fork_asm+0x11/0x20 [ 120.522133][ T1316] [ 120.530216][ T5882] Bluetooth: hci0: command tx timeout [ 120.544172][ T1316] team0: Port device wlan1 removed [ 120.623583][ T6540] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.642020][ T6540] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.666048][ T1316] hsr_slave_0: left promiscuous mode [ 120.672129][ T1316] hsr_slave_1: left promiscuous mode [ 120.677959][ T1316] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.685708][ T1316] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.695007][ T1316] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.702575][ T1316] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.710483][ T1316] bridge_slave_1: left allmulticast mode [ 120.716161][ T1316] bridge_slave_1: left promiscuous mode [ 120.722002][ T1316] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.731333][ T1316] bridge_slave_0: left allmulticast mode [ 120.736999][ T1316] bridge_slave_0: left promiscuous mode [ 120.742828][ T1316] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.754645][ T1316] veth1_macvtap: left promiscuous mode [ 120.760456][ T1316] veth0_macvtap: left promiscuous mode [ 120.766083][ T1316] veth1_vlan: left promiscuous mode [ 120.771509][ T1316] veth0_vlan: left promiscuous mode [ 120.991886][ T1316] team0 (unregistering): Port device team_slave_1 removed [ 121.016022][ T1316] team0 (unregistering): Port device team_slave_0 removed [ 121.042978][ T1316] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.074210][ T1316] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.178540][ T1316] bond0 (unregistering): Released all slaves [ 121.239158][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.246364][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.260868][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.268099][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.454270][ T6540] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.499354][ T6540] veth0_vlan: entered promiscuous mode [ 121.512978][ T6540] veth1_vlan: entered promiscuous mode [ 121.556920][ T6540] veth0_macvtap: entered promiscuous mode [ 121.574840][ T6540] veth1_macvtap: entered promiscuous mode [ 121.596172][ T6540] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.609610][ T6540] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.622666][ T6540] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.632729][ T6540] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.642350][ T6540] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.651164][ T6540] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.681969][ T6540] ieee80211 phy7: Selected rate control algorithm 'minstrel_ht' [ 121.704549][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.709775][ T6540] ieee80211 phy8: Selected rate control algorithm 'minstrel_ht' [ 121.724419][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/05/31 23:23:04 executed programs: 602 [ 121.747768][ T1316] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.756400][ T1316] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.792896][ T6583] netlink: 'syz.0.617': attribute type 10 has an invalid length. [ 121.811666][ T6583] team0: Port device wlan1 added [ 121.837995][ T6584] netlink: 'syz.0.618': attribute type 10 has an invalid length. [ 121.864908][ T6585] netlink: 'syz.0.619': attribute type 10 has an invalid length. [ 121.885762][ T6586] netlink: 'syz.0.620': attribute type 10 has an invalid length. [ 122.540295][ T5882] Bluetooth: hci0: command tx timeout [ 122.896223][ T6646] validate_nla: 57 callbacks suppressed [ 122.896238][ T6646] netlink: 'syz.0.678': attribute type 10 has an invalid length. [ 122.926546][ T6647] netlink: 'syz.0.679': attribute type 10 has an invalid length. [ 122.947456][ T6648] netlink: 'syz.0.680': attribute type 10 has an invalid length. [ 122.966900][ T6649] netlink: 'syz.0.681': attribute type 10 has an invalid length. [ 122.988253][ T6650] netlink: 'syz.0.682': attribute type 10 has an invalid length. [ 123.008619][ T6651] netlink: 'syz.0.683': attribute type 10 has an invalid length. [ 123.027906][ T6652] netlink: 'syz.0.684': attribute type 10 has an invalid length. [ 123.048833][ T6653] netlink: 'syz.0.685': attribute type 10 has an invalid length. [ 123.067556][ T6654] netlink: 'syz.0.686': attribute type 10 has an invalid length. [ 123.087665][ T6655] netlink: 'syz.0.687': attribute type 10 has an invalid length. [ 124.620211][ T5882] Bluetooth: hci0: command tx timeout [ 126.700376][ T5882] Bluetooth: hci0: command tx timeout 2026/05/31 23:23:09 executed programs: 886 [ 127.908383][ T6935] validate_nla: 279 callbacks suppressed [ 127.908396][ T6935] netlink: 'syz.0.967': attribute type 10 has an invalid length. [ 127.932304][ T6936] netlink: 'syz.0.968': attribute type 10 has an invalid length. [ 127.952013][ T6937] netlink: 'syz.0.969': attribute type 10 has an invalid length. [ 127.970044][ T6938] netlink: 'syz.0.970': attribute type 10 has an invalid length. [ 127.996429][ T6939] netlink: 'syz.0.971': attribute type 10 has an invalid length. [ 128.015550][ T6940] netlink: 'syz.0.972': attribute type 10 has an invalid length. [ 128.034179][ T6941] netlink: 'syz.0.973': attribute type 10 has an invalid length. [ 128.055947][ T6942] netlink: 'syz.0.974': attribute type 10 has an invalid length. [ 128.075942][ T6943] netlink: 'syz.0.975': attribute type 10 has an invalid length. [ 128.094021][ T6944] netlink: 'syz.0.976': attribute type 10 has an invalid length.