Warning: Permanently added '10.128.0.51' (ED25519) to the list of known hosts. 2026/04/03 08:37:36 parsed 1 programs syzkaller login: [ 71.742948][ T5768] cgroup: Unknown subsys name 'net' [ 71.910108][ T5768] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.281167][ T5768] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.447866][ T5796] chnl_net:caif_netlink_parms(): no params data found [ 75.517630][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.525418][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.532691][ T5796] bridge_slave_0: entered allmulticast mode [ 75.539858][ T5796] bridge_slave_0: entered promiscuous mode [ 75.548753][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.556201][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.563448][ T5796] bridge_slave_1: entered allmulticast mode [ 75.570229][ T5796] bridge_slave_1: entered promiscuous mode [ 75.598619][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.610259][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.634274][ T5796] team0: Port device team_slave_0 added [ 75.643403][ T5796] team0: Port device team_slave_1 added [ 75.672045][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.679265][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.705677][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.719066][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.726316][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.752286][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.793655][ T5796] hsr_slave_0: entered promiscuous mode [ 75.800005][ T5796] hsr_slave_1: entered promiscuous mode [ 75.923112][ T5796] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.940025][ T5796] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.949384][ T5796] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.959657][ T5796] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.989248][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.996477][ T5796] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.004672][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.011791][ T5796] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.067442][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.091270][ T999] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.100115][ T999] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.121048][ T5796] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.133113][ T2972] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.140257][ T2972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.153508][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.160610][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.349267][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.391640][ T5796] veth0_vlan: entered promiscuous mode [ 76.403354][ T5796] veth1_vlan: entered promiscuous mode [ 76.430677][ T5796] veth0_macvtap: entered promiscuous mode [ 76.439985][ T5796] veth1_macvtap: entered promiscuous mode [ 76.458515][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.471790][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.482879][ T5796] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.492511][ T5796] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.501263][ T5796] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.510334][ T5796] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.648380][ T999] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.845675][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.854730][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.863696][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.873328][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.881165][ T5834] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 77.888593][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.827826][ T1124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.835997][ T1124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.863063][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.872718][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/04/03 08:37:45 executed programs: 0 [ 79.338495][ T5083] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.347246][ T5083] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.356075][ T5083] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.364823][ T5083] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.372817][ T5083] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 79.381603][ T5083] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.491223][ T5871] chnl_net:caif_netlink_parms(): no params data found [ 79.542980][ T5871] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.550433][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.557892][ T5871] bridge_slave_0: entered allmulticast mode [ 79.566110][ T5871] bridge_slave_0: entered promiscuous mode [ 79.574151][ T5871] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.581244][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.589031][ T5871] bridge_slave_1: entered allmulticast mode [ 79.595850][ T5871] bridge_slave_1: entered promiscuous mode [ 79.618994][ T5871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.630843][ T5871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.669122][ T999] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.685902][ T5871] team0: Port device team_slave_0 added [ 79.694013][ T5871] team0: Port device team_slave_1 added [ 79.714251][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.721235][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.749023][ T5871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.761074][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.769433][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.796069][ T5871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.832203][ T5871] hsr_slave_0: entered promiscuous mode [ 79.838439][ T5871] hsr_slave_1: entered promiscuous mode [ 79.844627][ T5871] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.852382][ T5871] Cannot create hsr debugfs directory [ 81.405551][ T5834] Bluetooth: hci0: command tx timeout [ 81.804818][ T999] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.810719][ T787] cfg80211: failed to load regulatory.db [ 81.886692][ T999] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.682261][ T999] hsr_slave_0: left promiscuous mode [ 82.689691][ T999] hsr_slave_1: left promiscuous mode [ 82.704936][ T999] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.712384][ T999] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.733035][ T999] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.740892][ T999] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.749159][ T999] bridge_slave_1: left allmulticast mode [ 82.756965][ T999] bridge_slave_1: left promiscuous mode [ 82.763842][ T999] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.788195][ T999] bridge_slave_0: left allmulticast mode [ 82.793976][ T999] bridge_slave_0: left promiscuous mode [ 82.799648][ T999] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.819271][ T999] veth1_macvtap: left promiscuous mode [ 82.826303][ T999] veth0_macvtap: left promiscuous mode [ 82.832171][ T999] veth1_vlan: left promiscuous mode [ 82.838027][ T999] veth0_vlan: left promiscuous mode [ 83.211614][ T999] team0 (unregistering): Port device team_slave_1 removed [ 83.241839][ T999] team0 (unregistering): Port device team_slave_0 removed [ 83.270793][ T999] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 83.303638][ T999] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 83.483675][ T5834] Bluetooth: hci0: command tx timeout [ 83.518386][ T999] bond0 (unregistering): Released all slaves [ 83.619409][ T5871] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.628596][ T5871] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.641787][ T5871] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.654850][ T5871] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.740423][ T5871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.761735][ T5871] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.778185][ T1124] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.785346][ T1124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.809233][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.816532][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.995610][ T5871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.040259][ T5871] veth0_vlan: entered promiscuous mode [ 84.061380][ T5871] veth1_vlan: entered promiscuous mode [ 84.113364][ T5871] veth0_macvtap: entered promiscuous mode [ 84.129004][ T5871] veth1_macvtap: entered promiscuous mode [ 84.168858][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.181566][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.209884][ T5871] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.218798][ T5871] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.228197][ T5871] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.238133][ T5871] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/04/03 08:37:50 executed programs: 2 [ 84.349027][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.357089][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.380202][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.389704][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.432399][ T5910] netlink: 'syz.0.17': attribute type 10 has an invalid length. [ 84.456146][ T5910] team0: Port device wlan1 added [ 84.487819][ T5911] netlink: 'syz.0.18': attribute type 10 has an invalid length. [ 84.517798][ T5912] netlink: 'syz.0.19': attribute type 10 has an invalid length. [ 84.553381][ T5913] netlink: 'syz.0.20': attribute type 10 has an invalid length. [ 84.628324][ T5914] netlink: 'syz.0.21': attribute type 10 has an invalid length. [ 84.661444][ T5915] netlink: 'syz.0.22': attribute type 10 has an invalid length. [ 84.723554][ T5916] netlink: 'syz.0.23': attribute type 10 has an invalid length. [ 84.798963][ T5917] netlink: 'syz.0.24': attribute type 10 has an invalid length. [ 84.847551][ T5918] netlink: 'syz.0.25': attribute type 10 has an invalid length. [ 84.922457][ T5919] netlink: 'syz.0.26': attribute type 10 has an invalid length. [ 85.564078][ T5834] Bluetooth: hci0: command tx timeout [ 87.644248][ T5834] Bluetooth: hci0: command tx timeout 2026/04/03 08:37:55 executed programs: 201 [ 89.459340][ T6111] validate_nla: 191 callbacks suppressed [ 89.459351][ T6111] netlink: 'syz.0.218': attribute type 10 has an invalid length. [ 89.485218][ T6112] netlink: 'syz.0.219': attribute type 10 has an invalid length. [ 89.505800][ T6113] netlink: 'syz.0.220': attribute type 10 has an invalid length. [ 89.530318][ T6114] netlink: 'syz.0.221': attribute type 10 has an invalid length. [ 89.549052][ T6115] netlink: 'syz.0.222': attribute type 10 has an invalid length. [ 89.570176][ T6116] netlink: 'syz.0.223': attribute type 10 has an invalid length. [ 89.590377][ T6117] netlink: 'syz.0.224': attribute type 10 has an invalid length. [ 89.609225][ T6118] netlink: 'syz.0.225': attribute type 10 has an invalid length. [ 89.628512][ T6119] netlink: 'syz.0.226': attribute type 10 has an invalid length. [ 89.659796][ T6120] netlink: 'syz.0.227': attribute type 10 has an invalid length. 2026/04/03 08:38:00 executed programs: 461 [ 94.465531][ T6371] validate_nla: 250 callbacks suppressed [ 94.465544][ T6371] netlink: 'syz.0.478': attribute type 10 has an invalid length. [ 94.491539][ T6372] netlink: 'syz.0.479': attribute type 10 has an invalid length. [ 94.509644][ T6373] netlink: 'syz.0.480': attribute type 10 has an invalid length. [ 94.529618][ T6374] netlink: 'syz.0.481': attribute type 10 has an invalid length. [ 94.548998][ T6375] netlink: 'syz.0.482': attribute type 10 has an invalid length. [ 94.568600][ T6376] netlink: 'syz.0.483': attribute type 10 has an invalid length. [ 94.590043][ T6377] netlink: 'syz.0.484': attribute type 10 has an invalid length. [ 94.617441][ T6379] netlink: 'syz.0.485': attribute type 10 has an invalid length. [ 94.636036][ T6380] netlink: 'syz.0.486': attribute type 10 has an invalid length. [ 94.655464][ T6381] netlink: 'syz.0.487': attribute type 10 has an invalid length. [ 97.040669][ T5083] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.049702][ T5083] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.057832][ T5083] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.066415][ T5083] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.074848][ T5083] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 97.082140][ T5083] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.187304][ T6513] chnl_net:caif_netlink_parms(): no params data found [ 97.237393][ T6513] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.244702][ T6513] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.251932][ T6513] bridge_slave_0: entered allmulticast mode [ 97.258845][ T6513] bridge_slave_0: entered promiscuous mode [ 97.268823][ T6513] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.276339][ T6513] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.283840][ T6513] bridge_slave_1: entered allmulticast mode [ 97.291066][ T6513] bridge_slave_1: entered promiscuous mode [ 97.309111][ T1124] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.344071][ T6513] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.355200][ T6513] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.382310][ T1124] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.406178][ T6513] team0: Port device team_slave_0 added [ 97.414401][ T6513] team0: Port device team_slave_1 added [ 97.434906][ T6513] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.441882][ T6513] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.468119][ T6513] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.488174][ T1124] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.501992][ T6513] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.509225][ T6513] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.535448][ T6513] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.568376][ T6513] hsr_slave_0: entered promiscuous mode [ 97.574990][ T6513] hsr_slave_1: entered promiscuous mode [ 97.591599][ T1124] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.451752][ T1124] [ 98.454110][ T1124] ====================================================== [ 98.461119][ T1124] WARNING: possible circular locking dependency detected [ 98.468123][ T1124] syzkaller #0 Not tainted [ 98.472512][ T1124] ------------------------------------------------------ [ 98.479502][ T1124] kworker/u4:7/1124 is trying to acquire lock: [ 98.485627][ T1124] ffff888061260d00 (team->team_lock_key#2){+.+.}-{3:3}, at: team_del_slave+0x32/0x1c0 [ 98.495189][ T1124] [ 98.495189][ T1124] but task is already holding lock: [ 98.502529][ T1124] ffff88802c358768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x29a/0x690 [ 98.512849][ T1124] [ 98.512849][ T1124] which lock already depends on the new lock. [ 98.512849][ T1124] [ 98.523226][ T1124] [ 98.523226][ T1124] the existing dependency chain (in reverse order) is: [ 98.532215][ T1124] [ 98.532215][ T1124] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 98.539929][ T1124] __mutex_lock+0x136/0xcc0 [ 98.544935][ T1124] ieee80211_open+0x144/0x200 [ 98.550108][ T1124] __dev_open+0x2cb/0x430 [ 98.554944][ T1124] dev_open+0xab/0x190 [ 98.559523][ T1124] team_add_slave+0x75f/0x29a0 [ 98.564799][ T1124] do_setlink+0xdfe/0x4130 [ 98.569722][ T1124] rtnl_newlink+0x17da/0x20a0 [ 98.574907][ T1124] rtnetlink_rcv_msg+0x869/0xfa0 [ 98.580353][ T1124] netlink_rcv_skb+0x241/0x4d0 [ 98.585629][ T1124] netlink_unicast+0x751/0x8d0 [ 98.590901][ T1124] netlink_sendmsg+0x8d0/0xbf0 [ 98.596177][ T1124] ____sys_sendmsg+0x5ba/0x960 [ 98.601449][ T1124] ___sys_sendmsg+0x2a6/0x360 [ 98.606632][ T1124] __se_sys_sendmsg+0x1c2/0x2b0 [ 98.611985][ T1124] do_syscall_64+0x55/0xa0 [ 98.616911][ T1124] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 98.623314][ T1124] [ 98.623314][ T1124] -> #0 (team->team_lock_key#2){+.+.}-{3:3}: [ 98.631471][ T1124] __lock_acquire+0x2df1/0x7d40 [ 98.636831][ T1124] lock_acquire+0x19e/0x420 [ 98.641838][ T1124] __mutex_lock+0x136/0xcc0 [ 98.646848][ T1124] team_del_slave+0x32/0x1c0 [ 98.651940][ T1124] team_device_event+0x28d/0xa20 [ 98.657384][ T1124] notifier_call_chain+0x197/0x380 [ 98.663003][ T1124] unregister_netdevice_many_notify+0x100d/0x1900 [ 98.669921][ T1124] unregister_netdevice_queue+0x32c/0x370 [ 98.676143][ T1124] _cfg80211_unregister_wdev+0x16b/0x580 [ 98.682280][ T1124] ieee80211_remove_interfaces+0x49e/0x690 [ 98.688598][ T1124] ieee80211_unregister_hw+0x5d/0x2a0 [ 98.694477][ T1124] mac80211_hwsim_del_radio+0x289/0x480 [ 98.700526][ T1124] hwsim_exit_net+0x58d/0x650 [ 98.705709][ T1124] cleanup_net+0x70a/0xbb0 [ 98.710636][ T1124] process_scheduled_works+0xa5d/0x15d0 [ 98.716692][ T1124] worker_thread+0xa55/0xfc0 [ 98.721789][ T1124] kthread+0x2fa/0x390 [ 98.726364][ T1124] ret_from_fork+0x48/0x80 [ 98.731287][ T1124] ret_from_fork_asm+0x11/0x20 [ 98.736565][ T1124] [ 98.736565][ T1124] other info that might help us debug this: [ 98.736565][ T1124] [ 98.746773][ T1124] Possible unsafe locking scenario: [ 98.746773][ T1124] [ 98.754206][ T1124] CPU0 CPU1 [ 98.759553][ T1124] ---- ---- [ 98.764901][ T1124] lock(&rdev->wiphy.mtx); [ 98.769392][ T1124] lock(team->team_lock_key#2); [ 98.776839][ T1124] lock(&rdev->wiphy.mtx); [ 98.783846][ T1124] lock(team->team_lock_key#2); [ 98.788773][ T1124] [ 98.788773][ T1124] *** DEADLOCK *** [ 98.788773][ T1124] [ 98.796899][ T1124] 5 locks held by kworker/u4:7/1124: [ 98.802167][ T1124] #0: ffff888140048938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 98.813030][ T1124] #1: ffffc9000490fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 98.823541][ T1124] #2: ffffffff8e3b5190 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x14c/0xbb0 [ 98.832927][ T1124] #3: ffffffff8e3c21c8 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0 [ 98.842742][ T1124] #4: ffff88802c358768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x29a/0x690 [ 98.853514][ T1124] [ 98.853514][ T1124] stack backtrace: [ 98.859400][ T1124] CPU: 0 PID: 1124 Comm: kworker/u4:7 Not tainted syzkaller #0 [ 98.866931][ T1124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 98.876971][ T1124] Workqueue: netns cleanup_net [ 98.881743][ T1124] Call Trace: [ 98.885014][ T1124] [ 98.887935][ T1124] dump_stack_lvl+0x18c/0x250 [ 98.892606][ T1124] ? load_image+0x420/0x420 [ 98.897097][ T1124] ? show_regs_print_info+0x20/0x20 [ 98.902289][ T1124] ? print_circular_bug+0x12b/0x1a0 [ 98.907476][ T1124] check_noncircular+0x2fc/0x400 [ 98.912401][ T1124] ? print_deadlock_bug+0x5d0/0x5d0 [ 98.917585][ T1124] ? lockdep_lock+0xf5/0x230 [ 98.922161][ T1124] ? __lock_acquire+0x1273/0x7d40 [ 98.927172][ T1124] ? _find_first_zero_bit+0xd3/0x100 [ 98.932444][ T1124] __lock_acquire+0x2df1/0x7d40 [ 98.937290][ T1124] ? verify_lock_unused+0x140/0x140 [ 98.942481][ T1124] ? verify_lock_unused+0x140/0x140 [ 98.947675][ T1124] lock_acquire+0x19e/0x420 [ 98.952162][ T1124] ? team_del_slave+0x32/0x1c0 [ 98.956914][ T1124] ? __might_sleep+0xe0/0xe0 [ 98.961492][ T1124] ? read_lock_is_recursive+0x20/0x20 [ 98.966855][ T1124] __mutex_lock+0x136/0xcc0 [ 98.971342][ T1124] ? team_del_slave+0x32/0x1c0 [ 98.976090][ T1124] ? __lock_acquire+0x7d40/0x7d40 [ 98.981102][ T1124] ? rcu_is_watching+0x15/0xb0 [ 98.985856][ T1124] ? trace_contention_end+0x39/0xe0 [ 98.991040][ T1124] ? __mutex_lock+0x315/0xcc0 [ 98.995702][ T1124] ? team_del_slave+0x32/0x1c0 [ 99.000451][ T1124] ? mutex_lock_nested+0x20/0x20 [ 99.005375][ T1124] ? bond_netdev_event+0xeb/0xf20 [ 99.010388][ T1124] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 99.016007][ T1124] team_del_slave+0x32/0x1c0 [ 99.020584][ T1124] team_device_event+0x28d/0xa20 [ 99.025512][ T1124] notifier_call_chain+0x197/0x380 [ 99.030615][ T1124] unregister_netdevice_many_notify+0x100d/0x1900 [ 99.037023][ T1124] ? lock_chain_count+0x20/0x20 [ 99.041863][ T1124] ? unregister_netdevice_many+0x20/0x20 [ 99.047482][ T1124] ? kernfs_remove_by_name_ns+0x117/0x150 [ 99.053197][ T1124] ? __lock_acquire+0x7d40/0x7d40 [ 99.058211][ T1124] unregister_netdevice_queue+0x32c/0x370 [ 99.063918][ T1124] ? list_netdevice+0x730/0x730 [ 99.068753][ T1124] ? kernfs_remove_by_name_ns+0x117/0x150 [ 99.074464][ T1124] _cfg80211_unregister_wdev+0x16b/0x580 [ 99.080086][ T1124] ieee80211_remove_interfaces+0x49e/0x690 [ 99.085883][ T1124] ? ieee80211_do_stop+0x1e20/0x1e20 [ 99.091157][ T1124] ? rcu_is_watching+0x15/0xb0 [ 99.095912][ T1124] ieee80211_unregister_hw+0x5d/0x2a0 [ 99.101268][ T1124] mac80211_hwsim_del_radio+0x289/0x480 [ 99.106805][ T1124] ? rhashtable_remove_fast+0xc00/0xc00 [ 99.112342][ T1124] hwsim_exit_net+0x58d/0x650 [ 99.117009][ T1124] ? hwsim_init_net+0x90/0x90 [ 99.121677][ T1124] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 99.127471][ T1124] cleanup_net+0x70a/0xbb0 [ 99.131880][ T1124] ? ops_free_list+0x3b0/0x3b0 [ 99.136635][ T1124] ? _raw_spin_unlock_irq+0x23/0x50 [ 99.141824][ T1124] ? process_scheduled_works+0x96f/0x15d0 [ 99.147537][ T1124] ? process_scheduled_works+0x96f/0x15d0 [ 99.153242][ T1124] process_scheduled_works+0xa5d/0x15d0 [ 99.158783][ T1124] ? worker_attach_to_pool+0x380/0x380 [ 99.164230][ T1124] ? assign_work+0x3d2/0x5d0 [ 99.168808][ T1124] worker_thread+0xa55/0xfc0 [ 99.173393][ T1124] kthread+0x2fa/0x390 [ 99.177446][ T1124] ? pr_cont_work+0x560/0x560 [ 99.182110][ T1124] ? kthread_blkcg+0xd0/0xd0 [ 99.186684][ T1124] ret_from_fork+0x48/0x80 [ 99.191090][ T1124] ? kthread_blkcg+0xd0/0xd0 [ 99.195664][ T1124] ret_from_fork_asm+0x11/0x20 [ 99.200432][ T1124] [ 99.205285][ T5834] Bluetooth: hci0: command tx timeout [ 99.212861][ T1124] team0: Port device wlan1 removed [ 99.231143][ T6513] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 99.240495][ T6513] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 99.249669][ T6513] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 99.258982][ T6513] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 99.317617][ T6513] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.338791][ T1124] hsr_slave_0: left promiscuous mode [ 99.344619][ T1124] hsr_slave_1: left promiscuous mode [ 99.350219][ T1124] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.357897][ T1124] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.365471][ T1124] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.372848][ T1124] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.380469][ T1124] bridge_slave_1: left allmulticast mode [ 99.387092][ T1124] bridge_slave_1: left promiscuous mode [ 99.392772][ T1124] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.401631][ T1124] bridge_slave_0: left allmulticast mode [ 99.408474][ T1124] bridge_slave_0: left promiscuous mode [ 99.414234][ T1124] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.423909][ T1124] veth1_macvtap: left promiscuous mode [ 99.429426][ T1124] veth0_macvtap: left promiscuous mode [ 99.435455][ T1124] veth1_vlan: left promiscuous mode [ 99.440682][ T1124] veth0_vlan: left promiscuous mode [ 99.595845][ T1124] team0 (unregistering): Port device team_slave_1 removed [ 99.619668][ T1124] team0 (unregistering): Port device team_slave_0 removed [ 99.638131][ T1124] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.661330][ T1124] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.730864][ T1124] bond0 (unregistering): Released all slaves [ 99.815387][ T6513] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.825485][ T999] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.832591][ T999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.844606][ T2972] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.851676][ T2972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.981727][ T6513] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.020663][ T6513] veth0_vlan: entered promiscuous mode [ 100.030064][ T6513] veth1_vlan: entered promiscuous mode [ 100.050136][ T6513] veth0_macvtap: entered promiscuous mode [ 100.058227][ T6513] veth1_macvtap: entered promiscuous mode [ 100.070949][ T6513] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.089017][ T6513] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.100030][ T6513] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.109076][ T6513] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.117796][ T6513] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.126630][ T6513] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.155257][ T6513] ieee80211 phy7: Selected rate control algorithm 'minstrel_ht' [ 100.176251][ T6513] ieee80211 phy8: Selected rate control algorithm 'minstrel_ht' [ 100.179291][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.193191][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/04/03 08:38:06 executed programs: 602 [ 100.211804][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.220163][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.246811][ T6554] validate_nla: 129 callbacks suppressed [ 100.246822][ T6554] netlink: 'syz.0.617': attribute type 10 has an invalid length. [ 100.266676][ T6554] team0: Port device wlan1 added [ 100.281604][ T6555] netlink: 'syz.0.618': attribute type 10 has an invalid length. [ 100.301840][ T6556] netlink: 'syz.0.619': attribute type 10 has an invalid length. [ 100.327851][ T6557] netlink: 'syz.0.620': attribute type 10 has an invalid length. [ 100.343242][ T6558] netlink: 'syz.0.621': attribute type 10 has an invalid length. [ 100.358793][ T6559] netlink: 'syz.0.622': attribute type 10 has an invalid length. [ 100.398189][ T6561] netlink: 'syz.0.623': attribute type 10 has an invalid length. [ 100.415313][ T6562] netlink: 'syz.0.624': attribute type 10 has an invalid length. [ 100.430019][ T6563] netlink: 'syz.0.625': attribute type 10 has an invalid length. [ 100.458003][ T6564] netlink: 'syz.0.626': attribute type 10 has an invalid length. [ 101.243650][ T5834] Bluetooth: hci0: command tx timeout [ 103.324849][ T5834] Bluetooth: hci0: command tx timeout 2026/04/03 08:38:11 executed programs: 891 [ 105.278159][ T6852] validate_nla: 281 callbacks suppressed [ 105.278169][ T6852] netlink: 'syz.0.908': attribute type 10 has an invalid length. [ 105.298645][ T6853] netlink: 'syz.0.909': attribute type 10 has an invalid length. [ 105.313175][ T6854] netlink: 'syz.0.910': attribute type 10 has an invalid length. [ 105.348248][ T6855] netlink: 'syz.0.911': attribute type 10 has an invalid length. [ 105.363555][ T6856] netlink: 'syz.0.912': attribute type 10 has an invalid length. [ 105.378283][ T6857] netlink: 'syz.0.913': attribute type 10 has an invalid length. [ 105.403875][ T5834] Bluetooth: hci0: command tx timeout [ 105.412715][ T6858] netlink: 'syz.0.914': attribute type 10 has an invalid length. [ 105.429259][ T6859] netlink: 'syz.0.915': attribute type 10 has an invalid length. [ 105.443855][ T6860] netlink: 'syz.0.916': attribute type 10 has an invalid length. [ 105.467520][ T6861] netlink: 'syz.0.917': attribute type 10 has an invalid length.