Warning: Permanently added '10.128.1.139' (ED25519) to the list of known hosts. 2026/04/10 01:43:05 parsed 1 programs [ 86.549679][ T5777] cgroup: Unknown subsys name 'net' [ 86.712935][ T5777] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 87.146908][ T1194] cfg80211: failed to load regulatory.db [ 88.541755][ T5777] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.214338][ T5804] chnl_net:caif_netlink_parms(): no params data found [ 91.281286][ T5804] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.289043][ T5804] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.296430][ T5804] bridge_slave_0: entered allmulticast mode [ 91.303316][ T5804] bridge_slave_0: entered promiscuous mode [ 91.315051][ T5804] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.322373][ T5804] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.329674][ T5804] bridge_slave_1: entered allmulticast mode [ 91.336742][ T5804] bridge_slave_1: entered promiscuous mode [ 91.366839][ T5804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.379621][ T5804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.413304][ T5804] team0: Port device team_slave_0 added [ 91.421787][ T5804] team0: Port device team_slave_1 added [ 91.446540][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.453547][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.479786][ T5804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.492617][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.499754][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.526328][ T5804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.577450][ T5804] hsr_slave_0: entered promiscuous mode [ 91.593497][ T5804] hsr_slave_1: entered promiscuous mode [ 91.724256][ T5804] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.736537][ T5804] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.757269][ T5804] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.767392][ T5804] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.793886][ T5804] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.801341][ T5804] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.809503][ T5804] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.816739][ T5804] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.878827][ T5804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.903497][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.913249][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.938559][ T5804] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.951320][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.958491][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.971034][ T2969] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.978335][ T2969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.037678][ T5804] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.192128][ T5804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.242415][ T5804] veth0_vlan: entered promiscuous mode [ 92.252989][ T5804] veth1_vlan: entered promiscuous mode [ 92.294078][ T5804] veth0_macvtap: entered promiscuous mode [ 92.310181][ T5804] veth1_macvtap: entered promiscuous mode [ 92.334923][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.353648][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.369900][ T5804] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.379236][ T5804] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.389129][ T5804] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.398326][ T5804] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.568041][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.232356][ T2969] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.240470][ T2969] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.273560][ T2969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.281822][ T2969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.388841][ T5857] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 94.398888][ T5857] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 94.407519][ T5857] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 94.417317][ T5857] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 94.425356][ T5857] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 94.432877][ T5857] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.177792][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/04/10 01:43:16 executed programs: 0 [ 95.771401][ T5082] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.780404][ T5082] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.788806][ T5082] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.797789][ T5082] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.807679][ T5082] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 95.815114][ T5082] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.946833][ T5880] chnl_net:caif_netlink_parms(): no params data found [ 96.008410][ T5880] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.015787][ T5880] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.023097][ T5880] bridge_slave_0: entered allmulticast mode [ 96.030661][ T5880] bridge_slave_0: entered promiscuous mode [ 96.039079][ T5880] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.046424][ T5880] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.053596][ T5880] bridge_slave_1: entered allmulticast mode [ 96.060673][ T5880] bridge_slave_1: entered promiscuous mode [ 96.086959][ T5880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.098816][ T5880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.126745][ T5880] team0: Port device team_slave_0 added [ 96.134444][ T5880] team0: Port device team_slave_1 added [ 96.157264][ T5880] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.164253][ T5880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.190474][ T5880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.203156][ T5880] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.210404][ T5880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.237117][ T5880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.277509][ T5880] hsr_slave_0: entered promiscuous mode [ 96.284146][ T5880] hsr_slave_1: entered promiscuous mode [ 96.290751][ T5880] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.298982][ T5880] Cannot create hsr debugfs directory [ 97.859893][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.867949][ T5082] Bluetooth: hci0: command tx timeout [ 97.931693][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.712611][ T11] hsr_slave_0: left promiscuous mode [ 98.730241][ T11] hsr_slave_1: left promiscuous mode [ 98.754904][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.763953][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.773617][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.782718][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.791735][ T11] bridge_slave_1: left allmulticast mode [ 98.797548][ T11] bridge_slave_1: left promiscuous mode [ 98.804622][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.819191][ T11] bridge_slave_0: left allmulticast mode [ 98.825010][ T11] bridge_slave_0: left promiscuous mode [ 98.831364][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.861212][ T11] veth1_macvtap: left promiscuous mode [ 98.868161][ T11] veth0_macvtap: left promiscuous mode [ 98.873769][ T11] veth1_vlan: left promiscuous mode [ 98.881210][ T11] veth0_vlan: left promiscuous mode [ 99.431345][ T11] team0 (unregistering): Port device team_slave_1 removed [ 99.466318][ T11] team0 (unregistering): Port device team_slave_0 removed [ 99.501363][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.548141][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.781682][ T11] bond0 (unregistering): Released all slaves [ 99.902285][ T5880] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 99.913482][ T5880] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 99.923601][ T5880] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 99.936632][ T5082] Bluetooth: hci0: command tx timeout [ 99.938773][ T5880] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.051843][ T5880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.080662][ T5880] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.104575][ T2969] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.111803][ T2969] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.131352][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.138621][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.363760][ T5880] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.459865][ T5880] veth0_vlan: entered promiscuous mode [ 100.493648][ T5880] veth1_vlan: entered promiscuous mode [ 100.554942][ T5880] veth0_macvtap: entered promiscuous mode [ 100.572571][ T5880] veth1_macvtap: entered promiscuous mode [ 100.613237][ T5880] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.640984][ T5880] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.658486][ T5880] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.668042][ T5880] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.678406][ T5880] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.687604][ T5880] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.802216][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.817220][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/04/10 01:43:21 executed programs: 2 [ 100.842862][ T2969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.851009][ T2969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.900026][ T5921] netlink: 'syz.0.17': attribute type 10 has an invalid length. [ 100.923882][ T5921] team0: Port device wlan1 added [ 101.003025][ T5922] netlink: 'syz.0.18': attribute type 10 has an invalid length. [ 101.090534][ T5923] netlink: 'syz.0.19': attribute type 10 has an invalid length. [ 101.172190][ T5924] netlink: 'syz.0.20': attribute type 10 has an invalid length. [ 101.216225][ T5925] netlink: 'syz.0.21': attribute type 10 has an invalid length. [ 101.290100][ T5926] netlink: 'syz.0.22': attribute type 10 has an invalid length. [ 101.372570][ T5927] netlink: 'syz.0.23': attribute type 10 has an invalid length. [ 101.449807][ T5928] netlink: 'syz.0.24': attribute type 10 has an invalid length. [ 101.527117][ T5929] netlink: 'syz.0.25': attribute type 10 has an invalid length. [ 101.573838][ T5930] netlink: 'syz.0.26': attribute type 10 has an invalid length. [ 102.015641][ T5082] Bluetooth: hci0: command tx timeout [ 104.106381][ T5082] Bluetooth: hci0: command tx timeout 2026/04/10 01:43:26 executed programs: 182 [ 105.917853][ T6104] validate_nla: 173 callbacks suppressed [ 105.917866][ T6104] netlink: 'syz.0.200': attribute type 10 has an invalid length. [ 105.946583][ T6105] netlink: 'syz.0.201': attribute type 10 has an invalid length. [ 105.972130][ T6106] netlink: 'syz.0.202': attribute type 10 has an invalid length. [ 105.994285][ T6107] netlink: 'syz.0.203': attribute type 10 has an invalid length. [ 106.018374][ T6108] netlink: 'syz.0.204': attribute type 10 has an invalid length. [ 106.040933][ T6109] netlink: 'syz.0.205': attribute type 10 has an invalid length. [ 106.061701][ T6110] netlink: 'syz.0.206': attribute type 10 has an invalid length. [ 106.083755][ T6111] netlink: 'syz.0.207': attribute type 10 has an invalid length. [ 106.107085][ T6112] netlink: 'syz.0.208': attribute type 10 has an invalid length. [ 106.128763][ T6113] netlink: 'syz.0.209': attribute type 10 has an invalid length. 2026/04/10 01:43:31 executed programs: 429 [ 110.935836][ T6352] validate_nla: 237 callbacks suppressed [ 110.935853][ T6352] netlink: 'syz.0.447': attribute type 10 has an invalid length. [ 110.961622][ T6353] netlink: 'syz.0.448': attribute type 10 has an invalid length. [ 110.990403][ T6354] netlink: 'syz.0.449': attribute type 10 has an invalid length. [ 111.012371][ T6355] netlink: 'syz.0.450': attribute type 10 has an invalid length. [ 111.032100][ T6356] netlink: 'syz.0.451': attribute type 10 has an invalid length. [ 111.053268][ T6357] netlink: 'syz.0.452': attribute type 10 has an invalid length. [ 111.074397][ T6358] netlink: 'syz.0.453': attribute type 10 has an invalid length. [ 111.095483][ T6359] netlink: 'syz.0.454': attribute type 10 has an invalid length. [ 111.123175][ T6360] netlink: 'syz.0.455': attribute type 10 has an invalid length. [ 111.146277][ T6361] netlink: 'syz.0.456': attribute type 10 has an invalid length. [ 114.452477][ T5857] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 114.460726][ T5857] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 114.469696][ T5857] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 114.479114][ T5857] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 114.499160][ T5857] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 114.507413][ T5857] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 114.633196][ T6526] chnl_net:caif_netlink_parms(): no params data found [ 114.688463][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.732448][ T6526] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.740535][ T6526] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.747981][ T6526] bridge_slave_0: entered allmulticast mode [ 114.754817][ T6526] bridge_slave_0: entered promiscuous mode [ 114.771994][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.787537][ T6526] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.794700][ T6526] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.803395][ T6526] bridge_slave_1: entered allmulticast mode [ 114.811352][ T6526] bridge_slave_1: entered promiscuous mode [ 114.835291][ T6526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.856135][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.871999][ T6526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.903061][ T6526] team0: Port device team_slave_0 added [ 114.921387][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.938389][ T6526] team0: Port device team_slave_1 added [ 114.961756][ T6526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.968964][ T6526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.995082][ T6526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.008370][ T6526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.015450][ T6526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.041678][ T6526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.088395][ T6526] hsr_slave_0: entered promiscuous mode [ 115.095057][ T6526] hsr_slave_1: entered promiscuous mode [ 115.998227][ T11] [ 116.000631][ T11] ====================================================== [ 116.007695][ T11] WARNING: possible circular locking dependency detected [ 116.014743][ T11] syzkaller #0 Not tainted [ 116.019183][ T11] ------------------------------------------------------ [ 116.026225][ T11] kworker/u4:0/11 is trying to acquire lock: [ 116.032238][ T11] ffff88806d79cd00 (team->team_lock_key#2){+.+.}-{3:3}, at: team_del_slave+0x32/0x1c0 [ 116.041866][ T11] [ 116.041866][ T11] but task is already holding lock: [ 116.049258][ T11] ffff88807b4d0768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x29a/0x690 [ 116.059763][ T11] [ 116.059763][ T11] which lock already depends on the new lock. [ 116.059763][ T11] [ 116.070200][ T11] [ 116.070200][ T11] the existing dependency chain (in reverse order) is: [ 116.079244][ T11] [ 116.079244][ T11] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 116.087024][ T11] __mutex_lock+0x136/0xcc0 [ 116.092087][ T11] ieee80211_open+0x144/0x200 [ 116.097325][ T11] __dev_open+0x2cb/0x430 [ 116.102211][ T11] dev_open+0xab/0x190 [ 116.106920][ T11] team_add_slave+0x75f/0x29a0 [ 116.112238][ T11] do_setlink+0xdfe/0x4130 [ 116.117207][ T11] rtnl_newlink+0x17da/0x20a0 [ 116.122440][ T11] rtnetlink_rcv_msg+0x869/0xfa0 [ 116.127928][ T11] netlink_rcv_skb+0x241/0x4d0 [ 116.133249][ T11] netlink_unicast+0x751/0x8d0 [ 116.138571][ T11] netlink_sendmsg+0x8d0/0xbf0 [ 116.143888][ T11] ____sys_sendmsg+0x5ba/0x960 [ 116.149207][ T11] ___sys_sendmsg+0x2a6/0x360 [ 116.154481][ T11] __se_sys_sendmsg+0x1c2/0x2b0 [ 116.159861][ T11] do_syscall_64+0x55/0xa0 [ 116.164827][ T11] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 116.171259][ T11] [ 116.171259][ T11] -> #0 (team->team_lock_key#2){+.+.}-{3:3}: [ 116.179521][ T11] __lock_acquire+0x2df1/0x7d40 [ 116.184890][ T11] lock_acquire+0x19e/0x420 [ 116.189908][ T11] __mutex_lock+0x136/0xcc0 [ 116.194925][ T11] team_del_slave+0x32/0x1c0 [ 116.200026][ T11] team_device_event+0x28d/0xa20 [ 116.205489][ T11] notifier_call_chain+0x197/0x380 [ 116.211137][ T11] unregister_netdevice_many_notify+0x100d/0x1900 [ 116.218065][ T11] unregister_netdevice_queue+0x32c/0x370 [ 116.224299][ T11] _cfg80211_unregister_wdev+0x16b/0x580 [ 116.230454][ T11] ieee80211_remove_interfaces+0x49e/0x690 [ 116.236777][ T11] ieee80211_unregister_hw+0x5d/0x2a0 [ 116.242662][ T11] mac80211_hwsim_del_radio+0x289/0x480 [ 116.248725][ T11] hwsim_exit_net+0x58d/0x650 [ 116.253934][ T11] cleanup_net+0x70a/0xbb0 [ 116.258886][ T11] process_scheduled_works+0xa5d/0x15d0 [ 116.264955][ T11] worker_thread+0xa55/0xfc0 [ 116.270071][ T11] kthread+0x2fa/0x390 [ 116.274665][ T11] ret_from_fork+0x48/0x80 [ 116.279597][ T11] ret_from_fork_asm+0x11/0x20 [ 116.284879][ T11] [ 116.284879][ T11] other info that might help us debug this: [ 116.284879][ T11] [ 116.295190][ T11] Possible unsafe locking scenario: [ 116.295190][ T11] [ 116.302631][ T11] CPU0 CPU1 [ 116.307994][ T11] ---- ---- [ 116.313364][ T11] lock(&rdev->wiphy.mtx); [ 116.317864][ T11] lock(team->team_lock_key#2); [ 116.325334][ T11] lock(&rdev->wiphy.mtx); [ 116.332355][ T11] lock(team->team_lock_key#2); [ 116.337395][ T11] [ 116.337395][ T11] *** DEADLOCK *** [ 116.337395][ T11] [ 116.345632][ T11] 5 locks held by kworker/u4:0/11: [ 116.350738][ T11] #0: ffff88801a254938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 116.361628][ T11] #1: ffffc90000107d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 116.372178][ T11] #2: ffffffff8e3b5190 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x14c/0xbb0 [ 116.381843][ T11] #3: ffffffff8e3c21c8 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0 [ 116.391688][ T11] #4: ffff88807b4d0768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x29a/0x690 [ 116.402472][ T11] [ 116.402472][ T11] stack backtrace: [ 116.408357][ T11] CPU: 0 PID: 11 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 116.415810][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 116.425869][ T11] Workqueue: netns cleanup_net [ 116.430646][ T11] Call Trace: [ 116.433935][ T11] [ 116.436868][ T11] dump_stack_lvl+0x18c/0x250 [ 116.441558][ T11] ? load_image+0x420/0x420 [ 116.446061][ T11] ? show_regs_print_info+0x20/0x20 [ 116.451265][ T11] ? print_circular_bug+0x12b/0x1a0 [ 116.456467][ T11] check_noncircular+0x2fc/0x400 [ 116.461403][ T11] ? print_deadlock_bug+0x5d0/0x5d0 [ 116.466603][ T11] ? lockdep_lock+0xf5/0x230 [ 116.471278][ T11] ? __lock_acquire+0x1273/0x7d40 [ 116.476313][ T11] ? _find_first_zero_bit+0xd3/0x100 [ 116.481592][ T11] __lock_acquire+0x2df1/0x7d40 [ 116.486550][ T11] ? verify_lock_unused+0x140/0x140 [ 116.491742][ T11] ? verify_lock_unused+0x140/0x140 [ 116.496955][ T11] lock_acquire+0x19e/0x420 [ 116.501486][ T11] ? team_del_slave+0x32/0x1c0 [ 116.506259][ T11] ? __might_sleep+0xe0/0xe0 [ 116.511012][ T11] ? read_lock_is_recursive+0x20/0x20 [ 116.516729][ T11] __mutex_lock+0x136/0xcc0 [ 116.521246][ T11] ? team_del_slave+0x32/0x1c0 [ 116.526015][ T11] ? __lock_acquire+0x7d40/0x7d40 [ 116.531058][ T11] ? rcu_is_watching+0x15/0xb0 [ 116.535846][ T11] ? trace_contention_end+0x39/0xe0 [ 116.541267][ T11] ? __mutex_lock+0x315/0xcc0 [ 116.545947][ T11] ? team_del_slave+0x32/0x1c0 [ 116.550862][ T11] ? mutex_lock_nested+0x20/0x20 [ 116.555798][ T11] ? bond_netdev_event+0xeb/0xf20 [ 116.560912][ T11] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 116.566741][ T11] team_del_slave+0x32/0x1c0 [ 116.571456][ T11] team_device_event+0x28d/0xa20 [ 116.576840][ T11] notifier_call_chain+0x197/0x380 [ 116.582145][ T11] unregister_netdevice_many_notify+0x100d/0x1900 [ 116.588556][ T11] ? lock_chain_count+0x20/0x20 [ 116.593540][ T11] ? unregister_netdevice_many+0x20/0x20 [ 116.599229][ T11] ? kernfs_remove_by_name_ns+0x117/0x150 [ 116.605067][ T11] ? __lock_acquire+0x7d40/0x7d40 [ 116.610616][ T11] unregister_netdevice_queue+0x32c/0x370 [ 116.616434][ T11] ? list_netdevice+0x730/0x730 [ 116.621302][ T11] ? kernfs_remove_by_name_ns+0x117/0x150 [ 116.627057][ T11] _cfg80211_unregister_wdev+0x16b/0x580 [ 116.632827][ T11] ieee80211_remove_interfaces+0x49e/0x690 [ 116.638642][ T11] ? ieee80211_do_stop+0x1e20/0x1e20 [ 116.643929][ T11] ? rcu_is_watching+0x15/0xb0 [ 116.648731][ T11] ieee80211_unregister_hw+0x5d/0x2a0 [ 116.654204][ T11] mac80211_hwsim_del_radio+0x289/0x480 [ 116.659757][ T11] ? rhashtable_remove_fast+0xc00/0xc00 [ 116.665308][ T11] hwsim_exit_net+0x58d/0x650 [ 116.669984][ T11] ? hwsim_init_net+0x90/0x90 [ 116.674684][ T11] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 116.680498][ T11] cleanup_net+0x70a/0xbb0 [ 116.684912][ T11] ? ops_free_list+0x3b0/0x3b0 [ 116.689675][ T11] ? _raw_spin_unlock_irq+0x23/0x50 [ 116.694895][ T11] ? process_scheduled_works+0x96f/0x15d0 [ 116.700708][ T11] ? process_scheduled_works+0x96f/0x15d0 [ 116.706423][ T11] process_scheduled_works+0xa5d/0x15d0 [ 116.711996][ T11] ? worker_attach_to_pool+0x380/0x380 [ 116.717479][ T11] ? assign_work+0x3d2/0x5d0 [ 116.722086][ T11] worker_thread+0xa55/0xfc0 [ 116.726695][ T11] kthread+0x2fa/0x390 [ 116.730882][ T11] ? pr_cont_work+0x560/0x560 [ 116.735586][ T11] ? kthread_blkcg+0xd0/0xd0 [ 116.740190][ T11] ret_from_fork+0x48/0x80 [ 116.744697][ T11] ? kthread_blkcg+0xd0/0xd0 [ 116.749431][ T11] ret_from_fork_asm+0x11/0x20 [ 116.754300][ T11] [ 116.758186][ T5857] Bluetooth: hci1: command tx timeout [ 116.769946][ T11] team0: Port device wlan1 removed [ 116.779476][ T6526] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 116.795011][ T6526] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 116.804300][ T6526] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 116.817107][ T6526] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 116.890060][ T11] hsr_slave_0: left promiscuous mode [ 116.896277][ T11] hsr_slave_1: left promiscuous mode [ 116.902026][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.911193][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.919315][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.926773][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.934240][ T11] bridge_slave_1: left allmulticast mode [ 116.940124][ T11] bridge_slave_1: left promiscuous mode [ 116.945865][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.954239][ T11] bridge_slave_0: left allmulticast mode [ 116.959996][ T11] bridge_slave_0: left promiscuous mode [ 116.965769][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.976252][ T11] veth1_macvtap: left promiscuous mode [ 116.981781][ T11] veth0_macvtap: left promiscuous mode [ 116.988183][ T11] veth1_vlan: left promiscuous mode [ 116.993613][ T11] veth0_vlan: left promiscuous mode [ 117.161613][ T11] team0 (unregistering): Port device team_slave_1 removed [ 117.188087][ T11] team0 (unregistering): Port device team_slave_0 removed [ 117.209495][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 117.235550][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 117.340712][ T11] bond0 (unregistering): Released all slaves [ 117.396450][ T6526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.414541][ T6526] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.424721][ T2969] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.432483][ T2969] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.450910][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.458098][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.604366][ T6526] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.639912][ T6526] veth0_vlan: entered promiscuous mode [ 117.649709][ T6526] veth1_vlan: entered promiscuous mode [ 117.676130][ T6526] veth0_macvtap: entered promiscuous mode [ 117.685072][ T6526] veth1_macvtap: entered promiscuous mode [ 117.704475][ T6526] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.718121][ T6526] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.729831][ T6526] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.739381][ T6526] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.748115][ T6526] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.757218][ T6526] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.790150][ T6526] ieee80211 phy7: Selected rate control algorithm 'minstrel_ht' [ 117.810281][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.811850][ T6526] ieee80211 phy8: Selected rate control algorithm 'minstrel_ht' [ 117.828861][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/04/10 01:43:38 executed programs: 602 [ 117.849390][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.857938][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.888330][ T6572] validate_nla: 160 callbacks suppressed [ 117.888341][ T6572] netlink: 'syz.0.617': attribute type 10 has an invalid length. [ 117.904478][ T6572] team0: Port device wlan1 added [ 117.929755][ T6573] netlink: 'syz.0.618': attribute type 10 has an invalid length. [ 117.951844][ T6574] netlink: 'syz.0.619': attribute type 10 has an invalid length. [ 117.970302][ T6575] netlink: 'syz.0.620': attribute type 10 has an invalid length. [ 117.987790][ T6576] netlink: 'syz.0.621': attribute type 10 has an invalid length. [ 118.004660][ T6577] netlink: 'syz.0.622': attribute type 10 has an invalid length. [ 118.029814][ T6578] netlink: 'syz.0.623': attribute type 10 has an invalid length. [ 118.047779][ T6579] netlink: 'syz.0.624': attribute type 10 has an invalid length. [ 118.063233][ T6580] netlink: 'syz.0.625': attribute type 10 has an invalid length. [ 118.100682][ T6581] netlink: 'syz.0.626': attribute type 10 has an invalid length. [ 118.815623][ T5857] Bluetooth: hci1: command tx timeout [ 120.895572][ T5857] Bluetooth: hci1: command tx timeout 2026/04/10 01:43:43 executed programs: 894 [ 122.901667][ T6866] validate_nla: 284 callbacks suppressed [ 122.901678][ T6866] netlink: 'syz.0.911': attribute type 10 has an invalid length. [ 122.925621][ T6867] netlink: 'syz.0.912': attribute type 10 has an invalid length. [ 122.941530][ T6868] netlink: 'syz.0.913': attribute type 10 has an invalid length. [ 122.971242][ T6869] netlink: 'syz.0.914': attribute type 10 has an invalid length. [ 122.986506][ T5857] Bluetooth: hci1: command tx timeout [ 122.994690][ T6870] netlink: 'syz.0.915': attribute type 10 has an invalid length. [ 123.012375][ T6871] netlink: 'syz.0.916': attribute type 10 has an invalid length. [ 123.029868][ T6872] netlink: 'syz.0.917': attribute type 10 has an invalid length. [ 123.046210][ T6873] netlink: 'syz.0.918': attribute type 10 has an invalid length. [ 123.062993][ T6874] netlink: 'syz.0.919': attribute type 10 has an invalid length. [ 123.090011][ T6875] netlink: 'syz.0.920': attribute type 10 has an invalid length.