Warning: Permanently added '10.128.0.209' (ED25519) to the list of known hosts. 2025/06/14 03:11:47 ignoring optional flag "sandboxArg"="0" 2025/06/14 03:11:48 parsed 1 programs [ 367.468057][ T5883] cgroup: Unknown subsys name 'net' [ 367.584326][ T5883] cgroup: Unknown subsys name 'cpuset' [ 367.594516][ T5883] cgroup: Unknown subsys name 'rlimit' [ 369.283744][ T5883] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 372.393316][ T5889] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 373.650100][ T5907] chnl_net:caif_netlink_parms(): no params data found [ 373.755288][ T5907] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.763704][ T5907] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.771230][ T5907] bridge_slave_0: entered allmulticast mode [ 373.778857][ T5907] bridge_slave_0: entered promiscuous mode [ 373.788464][ T5907] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.795961][ T5907] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.803726][ T5907] bridge_slave_1: entered allmulticast mode [ 373.811114][ T5907] bridge_slave_1: entered promiscuous mode [ 373.848329][ T5907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 373.862295][ T5907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 373.907231][ T5907] team0: Port device team_slave_0 added [ 373.915567][ T5907] team0: Port device team_slave_1 added [ 373.947474][ T5907] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 373.954513][ T5907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.981000][ T5907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 373.993729][ T5907] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.000791][ T5907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.028427][ T5907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 374.076238][ T5907] hsr_slave_0: entered promiscuous mode [ 374.082899][ T5907] hsr_slave_1: entered promiscuous mode [ 374.239176][ T5907] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 374.252086][ T5907] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 374.262604][ T5907] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 374.273897][ T5907] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 374.306897][ T5907] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.314144][ T5907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.322103][ T5907] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.329243][ T5907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.385850][ T5907] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.405521][ T3031] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.415349][ T3031] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.433075][ T5907] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.447583][ T3031] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.454769][ T3031] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.468713][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.475986][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.679523][ T5907] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 374.725679][ T5907] veth0_vlan: entered promiscuous mode [ 374.737463][ T5907] veth1_vlan: entered promiscuous mode [ 374.767044][ T5907] veth0_macvtap: entered promiscuous mode [ 374.778170][ T5907] veth1_macvtap: entered promiscuous mode [ 374.804761][ T5907] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 374.821312][ T5907] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 374.834666][ T5907] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.844420][ T5907] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.853544][ T5907] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.862712][ T5907] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.986665][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.054294][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.123914][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.219872][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.556511][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.565501][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.598699][ T3001] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.607176][ T3001] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.853983][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 376.866756][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 376.875049][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 376.883776][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 376.892270][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 2025/06/14 03:12:02 executed programs: 0 [ 377.453312][ T5156] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 377.461676][ T5156] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 377.469489][ T5156] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 377.479293][ T5156] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 377.487170][ T5156] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 377.664358][ T5981] chnl_net:caif_netlink_parms(): no params data found [ 377.745665][ T5981] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.752986][ T5981] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.760363][ T5981] bridge_slave_0: entered allmulticast mode [ 377.767637][ T5981] bridge_slave_0: entered promiscuous mode [ 377.777568][ T5981] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.785216][ T5981] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.793220][ T5981] bridge_slave_1: entered allmulticast mode [ 377.800883][ T5981] bridge_slave_1: entered promiscuous mode [ 377.836692][ T5981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 377.849242][ T5981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 377.887161][ T5981] team0: Port device team_slave_0 added [ 377.895713][ T5981] team0: Port device team_slave_1 added [ 377.933666][ T5981] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 377.941122][ T5981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.967688][ T5981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 377.983853][ T5981] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 377.991788][ T5981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.017914][ T5981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 378.128600][ T5981] hsr_slave_0: entered promiscuous mode [ 378.135587][ T5981] hsr_slave_1: entered promiscuous mode [ 378.143592][ T5981] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 378.151555][ T5981] Cannot create hsr debugfs directory [ 378.196306][ T12] bridge_slave_1: left allmulticast mode [ 378.203078][ T12] bridge_slave_1: left promiscuous mode [ 378.209101][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.221334][ T12] bridge_slave_0: left allmulticast mode [ 378.227056][ T12] bridge_slave_0: left promiscuous mode [ 378.234241][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.466146][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 378.477313][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 378.487553][ T12] bond0 (unregistering): Released all slaves [ 378.601507][ T12] hsr_slave_0: left promiscuous mode [ 378.607651][ T12] hsr_slave_1: left promiscuous mode [ 378.614849][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 378.631647][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 378.643865][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 378.654070][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 378.681540][ T12] veth1_macvtap: left promiscuous mode [ 378.687296][ T12] veth0_macvtap: left promiscuous mode [ 378.693882][ T12] veth1_vlan: left promiscuous mode [ 378.699319][ T12] veth0_vlan: left promiscuous mode [ 379.201295][ T12] team0 (unregistering): Port device team_slave_1 removed [ 379.236646][ T12] team0 (unregistering): Port device team_slave_0 removed [ 379.580591][ T51] Bluetooth: hci0: command tx timeout [ 380.602141][ T5981] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 380.618353][ T5981] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 380.646367][ T5981] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 380.662452][ T5981] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 380.925686][ T5981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.986509][ T5981] 8021q: adding VLAN 0 to HW filter on device team0 [ 381.031157][ T5929] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.038410][ T5929] bridge0: port 1(bridge_slave_0) entered forwarding state [ 381.053221][ T5929] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.060454][ T5929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 381.587503][ T5981] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 381.646970][ T5981] veth0_vlan: entered promiscuous mode [ 381.659941][ T51] Bluetooth: hci0: command tx timeout [ 381.667791][ T5981] veth1_vlan: entered promiscuous mode [ 381.717424][ T5981] veth0_macvtap: entered promiscuous mode [ 381.729582][ T5981] veth1_macvtap: entered promiscuous mode [ 381.761821][ T5981] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 381.778273][ T5981] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 381.794195][ T5981] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.805124][ T5981] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.814010][ T5981] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.826146][ T5981] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.917703][ T5996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.930567][ T5996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.974933][ T5996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.985649][ T5996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.067898][ T6059] netlink: 'syz.0.16': attribute type 10 has an invalid length. [ 382.096645][ T6059] team0: Port device wlan1 added [ 382.136870][ T6061] netlink: 'syz.0.17': attribute type 10 has an invalid length. [ 382.182479][ T6062] netlink: 'syz.0.18': attribute type 10 has an invalid length. [ 382.216195][ T6064] netlink: 'syz.0.19': attribute type 10 has an invalid length. [ 382.258151][ T6066] netlink: 'syz.0.20': attribute type 10 has an invalid length. [ 382.293170][ T6069] netlink: 'syz.0.21': attribute type 10 has an invalid length. [ 382.328865][ T6070] netlink: 'syz.0.22': attribute type 10 has an invalid length. [ 382.363277][ T6071] netlink: 'syz.0.23': attribute type 10 has an invalid length. 2025/06/14 03:12:07 executed programs: 10 [ 382.402099][ T6074] netlink: 'syz.0.24': attribute type 10 has an invalid length. [ 382.437862][ T6075] netlink: 'syz.0.25': attribute type 10 has an invalid length. [ 383.749942][ T51] Bluetooth: hci0: command tx timeout [ 383.903684][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.911179][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 385.829814][ T51] Bluetooth: hci0: command tx timeout [ 387.075420][ T6317] validate_nla: 219 callbacks suppressed [ 387.075435][ T6317] netlink: 'syz.0.245': attribute type 10 has an invalid length. [ 387.105443][ T6318] netlink: 'syz.0.246': attribute type 10 has an invalid length. [ 387.128848][ T6319] netlink: 'syz.0.247': attribute type 10 has an invalid length. [ 387.151841][ T6320] netlink: 'syz.0.248': attribute type 10 has an invalid length. [ 387.177459][ T6321] netlink: 'syz.0.249': attribute type 10 has an invalid length. [ 387.202563][ T6322] netlink: 'syz.0.250': attribute type 10 has an invalid length. [ 387.224671][ T6323] netlink: 'syz.0.251': attribute type 10 has an invalid length. [ 387.251140][ T6324] netlink: 'syz.0.252': attribute type 10 has an invalid length. [ 387.277697][ T6325] netlink: 'syz.0.253': attribute type 10 has an invalid length. [ 387.304685][ T6326] netlink: 'syz.0.254': attribute type 10 has an invalid length. 2025/06/14 03:12:12 executed programs: 244 [ 392.091423][ T6561] validate_nla: 234 callbacks suppressed [ 392.091438][ T6561] netlink: 'syz.0.489': attribute type 10 has an invalid length. [ 392.120713][ T6562] netlink: 'syz.0.490': attribute type 10 has an invalid length. [ 392.142602][ T6563] netlink: 'syz.0.491': attribute type 10 has an invalid length. [ 392.166078][ T6564] netlink: 'syz.0.492': attribute type 10 has an invalid length. [ 392.190126][ T6565] netlink: 'syz.0.493': attribute type 10 has an invalid length. [ 392.214475][ T6566] netlink: 'syz.0.494': attribute type 10 has an invalid length. [ 392.236929][ T6567] netlink: 'syz.0.495': attribute type 10 has an invalid length. [ 392.259191][ T6568] netlink: 'syz.0.496': attribute type 10 has an invalid length. [ 392.283486][ T6569] netlink: 'syz.0.497': attribute type 10 has an invalid length. [ 392.306210][ T6570] netlink: 'syz.0.498': attribute type 10 has an invalid length. 2025/06/14 03:12:17 executed programs: 489 [ 394.728550][ T5156] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 394.742535][ T5156] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 394.750557][ T5156] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 394.759183][ T5156] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 394.767727][ T5156] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 394.873200][ T3031] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.936303][ T3031] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.001724][ T3031] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.016980][ T6690] chnl_net:caif_netlink_parms(): no params data found [ 395.079154][ T3031] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.119399][ T6690] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.126698][ T6690] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.133939][ T6690] bridge_slave_0: entered allmulticast mode [ 395.141518][ T6690] bridge_slave_0: entered promiscuous mode [ 395.152687][ T6690] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.159967][ T6690] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.167152][ T6690] bridge_slave_1: entered allmulticast mode [ 395.175196][ T6690] bridge_slave_1: entered promiscuous mode [ 395.216382][ T6690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 395.239002][ T6690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 395.295937][ T6690] team0: Port device team_slave_0 added [ 395.306699][ T6690] team0: Port device team_slave_1 added [ 395.365610][ T6690] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 395.373267][ T6690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 395.399675][ T6690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 395.412874][ T6690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 395.422356][ T6690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 395.448730][ T6690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 395.460596][ T3031] bridge_slave_1: left allmulticast mode [ 395.466297][ T3031] bridge_slave_1: left promiscuous mode [ 395.472142][ T3031] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.481957][ T3031] bridge_slave_0: left allmulticast mode [ 395.487615][ T3031] bridge_slave_0: left promiscuous mode [ 395.494126][ T3031] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.736552][ T3031] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 395.747404][ T3031] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 395.757662][ T3031] bond0 (unregistering): Released all slaves [ 395.832000][ T6690] hsr_slave_0: entered promiscuous mode [ 395.838348][ T6690] hsr_slave_1: entered promiscuous mode [ 395.851962][ T3031] [ 395.854316][ T3031] ====================================================== [ 395.861329][ T3031] WARNING: possible circular locking dependency detected [ 395.868350][ T3031] 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 Not tainted [ 395.875459][ T3031] ------------------------------------------------------ [ 395.882472][ T3031] kworker/u8:9/3031 is trying to acquire lock: [ 395.888622][ T3031] ffff888022b14e00 (team->team_lock_key#2){+.+.}-{4:4}, at: team_del_slave+0x32/0x1c0 [ 395.898234][ T3031] [ 395.898234][ T3031] but task is already holding lock: [ 395.905596][ T3031] ffff88807c3a0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0 [ 395.915965][ T3031] [ 395.915965][ T3031] which lock already depends on the new lock. [ 395.915965][ T3031] [ 395.926366][ T3031] [ 395.926366][ T3031] the existing dependency chain (in reverse order) is: [ 395.935396][ T3031] [ 395.935396][ T3031] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 395.943134][ T3031] lock_acquire+0x120/0x360 [ 395.948166][ T3031] __mutex_lock+0x182/0xe80 [ 395.953199][ T3031] ieee80211_open+0xed/0x1f0 [ 395.958323][ T3031] __dev_open+0x470/0x880 [ 395.963178][ T3031] netif_open+0xaa/0x170 [ 395.967966][ T3031] dev_open+0x125/0x260 [ 395.972652][ T3031] team_add_slave+0xb36/0x2840 [ 395.977972][ T3031] do_set_master+0x530/0x6d0 [ 395.983148][ T3031] do_setlink+0xcf0/0x41c0 [ 395.988108][ T3031] rtnl_newlink+0x160b/0x1c70 [ 395.993336][ T3031] rtnetlink_rcv_msg+0x7cc/0xb70 [ 395.998805][ T3031] netlink_rcv_skb+0x208/0x470 [ 396.004110][ T3031] netlink_unicast+0x75b/0x8d0 [ 396.009404][ T3031] netlink_sendmsg+0x805/0xb30 [ 396.014708][ T3031] __sock_sendmsg+0x219/0x270 [ 396.019913][ T3031] ____sys_sendmsg+0x505/0x830 [ 396.025219][ T3031] ___sys_sendmsg+0x21f/0x2a0 [ 396.030552][ T3031] __x64_sys_sendmsg+0x19b/0x260 [ 396.036035][ T3031] do_syscall_64+0xfa/0x3b0 [ 396.041066][ T3031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.047505][ T3031] [ 396.047505][ T3031] -> #0 (team->team_lock_key#2){+.+.}-{4:4}: [ 396.055700][ T3031] validate_chain+0xb9b/0x2140 [ 396.060999][ T3031] __lock_acquire+0xab9/0xd20 [ 396.066231][ T3031] lock_acquire+0x120/0x360 [ 396.071269][ T3031] __mutex_lock+0x182/0xe80 [ 396.076290][ T3031] team_del_slave+0x32/0x1c0 [ 396.081399][ T3031] team_device_event+0x285/0xa20 [ 396.086866][ T3031] notifier_call_chain+0x1b3/0x3e0 [ 396.092594][ T3031] unregister_netdevice_many_notify+0x15d8/0x2320 [ 396.099534][ T3031] unregister_netdevice_queue+0x33c/0x380 [ 396.105782][ T3031] _cfg80211_unregister_wdev+0x165/0x590 [ 396.111954][ T3031] ieee80211_remove_interfaces+0x49a/0x6d0 [ 396.118282][ T3031] ieee80211_unregister_hw+0x5d/0x2c0 [ 396.124197][ T3031] mac80211_hwsim_del_radio+0x275/0x460 [ 396.130279][ T3031] hwsim_exit_net+0x584/0x640 [ 396.135505][ T3031] ops_undo_list+0x49a/0x990 [ 396.140640][ T3031] cleanup_net+0x4c5/0x800 [ 396.145576][ T3031] process_scheduled_works+0xae1/0x17b0 [ 396.151654][ T3031] worker_thread+0x8a0/0xda0 [ 396.156762][ T3031] kthread+0x70e/0x8a0 [ 396.161350][ T3031] ret_from_fork+0x3fc/0x770 [ 396.166482][ T3031] ret_from_fork_asm+0x1a/0x30 [ 396.171771][ T3031] [ 396.171771][ T3031] other info that might help us debug this: [ 396.171771][ T3031] [ 396.181996][ T3031] Possible unsafe locking scenario: [ 396.181996][ T3031] [ 396.189445][ T3031] CPU0 CPU1 [ 396.194813][ T3031] ---- ---- [ 396.200185][ T3031] lock(&rdev->wiphy.mtx); [ 396.204783][ T3031] lock(team->team_lock_key#2); [ 396.212254][ T3031] lock(&rdev->wiphy.mtx); [ 396.219280][ T3031] lock(team->team_lock_key#2); [ 396.224231][ T3031] [ 396.224231][ T3031] *** DEADLOCK *** [ 396.224231][ T3031] [ 396.232377][ T3031] 5 locks held by kworker/u8:9/3031: [ 396.237659][ T3031] #0: ffff88801b2fe148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 396.248549][ T3031] #1: ffffc9000bbc7bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 396.259095][ T3031] #2: ffffffff8f503950 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 396.268434][ T3031] #3: ffffffff8f510548 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_unregister_hw+0x55/0x2c0 [ 396.278285][ T3031] #4: ffff88807c3a0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0 [ 396.289168][ T3031] [ 396.289168][ T3031] stack backtrace: [ 396.295078][ T3031] CPU: 1 UID: 0 PID: 3031 Comm: kworker/u8:9 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 396.295097][ T3031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 396.295108][ T3031] Workqueue: netns cleanup_net [ 396.295133][ T3031] Call Trace: [ 396.295141][ T3031] [ 396.295148][ T3031] dump_stack_lvl+0x189/0x250 [ 396.295175][ T3031] ? __pfx_dump_stack_lvl+0x10/0x10 [ 396.295198][ T3031] ? __pfx__printk+0x10/0x10 [ 396.295214][ T3031] ? print_lock_name+0xde/0x100 [ 396.295230][ T3031] print_circular_bug+0x2ee/0x310 [ 396.295248][ T3031] check_noncircular+0x134/0x160 [ 396.295264][ T3031] validate_chain+0xb9b/0x2140 [ 396.295281][ T3031] ? lockdep_hardirqs_on+0x9c/0x150 [ 396.295308][ T3031] __lock_acquire+0xab9/0xd20 [ 396.295332][ T3031] ? team_del_slave+0x32/0x1c0 [ 396.295345][ T3031] lock_acquire+0x120/0x360 [ 396.295365][ T3031] ? team_del_slave+0x32/0x1c0 [ 396.295380][ T3031] ? __mutex_trylock_common+0x153/0x260 [ 396.295403][ T3031] __mutex_lock+0x182/0xe80 [ 396.295416][ T3031] ? team_del_slave+0x32/0x1c0 [ 396.295430][ T3031] ? rcu_is_watching+0x15/0xb0 [ 396.295456][ T3031] ? team_del_slave+0x32/0x1c0 [ 396.295470][ T3031] ? __pfx___mutex_lock+0x10/0x10 [ 396.295484][ T3031] ? bond_netdev_event+0xd9/0xe80 [ 396.295501][ T3031] ? __pfx___mutex_lock+0x10/0x10 [ 396.295515][ T3031] ? __pfx_bond_netdev_event+0x10/0x10 [ 396.295534][ T3031] team_del_slave+0x32/0x1c0 [ 396.295549][ T3031] team_device_event+0x285/0xa20 [ 396.295572][ T3031] notifier_call_chain+0x1b3/0x3e0 [ 396.295599][ T3031] unregister_netdevice_many_notify+0x15d8/0x2320 [ 396.295629][ T3031] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 396.295652][ T3031] ? call_rcu+0x6dd/0x990 [ 396.295668][ T3031] ? lockdep_hardirqs_on+0x9c/0x150 [ 396.295700][ T3031] unregister_netdevice_queue+0x33c/0x380 [ 396.295723][ T3031] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 396.295748][ T3031] _cfg80211_unregister_wdev+0x165/0x590 [ 396.295768][ T3031] ieee80211_remove_interfaces+0x49a/0x6d0 [ 396.295784][ T3031] ? __pfx_synchronize_rcu+0x10/0x10 [ 396.295799][ T3031] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 396.295814][ T3031] ? rcu_is_watching+0x15/0xb0 [ 396.295840][ T3031] ieee80211_unregister_hw+0x5d/0x2c0 [ 396.295863][ T3031] mac80211_hwsim_del_radio+0x275/0x460 [ 396.295881][ T3031] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 396.295901][ T3031] hwsim_exit_net+0x584/0x640 [ 396.295925][ T3031] ? __pfx_hwsim_exit_net+0x10/0x10 [ 396.295949][ T3031] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 396.295970][ T3031] ops_undo_list+0x49a/0x990 [ 396.295989][ T3031] ? __pfx_ops_undo_list+0x10/0x10 [ 396.296010][ T3031] cleanup_net+0x4c5/0x800 [ 396.296027][ T3031] ? __pfx_cleanup_net+0x10/0x10 [ 396.296045][ T3031] ? _raw_spin_unlock_irq+0x23/0x50 [ 396.296065][ T3031] ? process_scheduled_works+0x9ef/0x17b0 [ 396.296088][ T3031] ? process_scheduled_works+0x9ef/0x17b0 [ 396.296122][ T3031] process_scheduled_works+0xae1/0x17b0 [ 396.296154][ T3031] ? __pfx_process_scheduled_works+0x10/0x10 [ 396.296181][ T3031] worker_thread+0x8a0/0xda0 [ 396.296195][ T3031] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 396.296218][ T3031] ? __kthread_parkme+0x7b/0x200 [ 396.296234][ T3031] kthread+0x70e/0x8a0 [ 396.296251][ T3031] ? __pfx_worker_thread+0x10/0x10 [ 396.296273][ T3031] ? __pfx_kthread+0x10/0x10 [ 396.296288][ T3031] ? _raw_spin_unlock_irq+0x23/0x50 [ 396.296308][ T3031] ? lockdep_hardirqs_on+0x9c/0x150 [ 396.296329][ T3031] ? __pfx_kthread+0x10/0x10 [ 396.296344][ T3031] ret_from_fork+0x3fc/0x770 [ 396.296365][ T3031] ? __pfx_ret_from_fork+0x10/0x10 [ 396.296392][ T3031] ? __switch_to_asm+0x39/0x70 [ 396.296407][ T3031] ? __switch_to_asm+0x33/0x70 [ 396.296421][ T3031] ? __pfx_kthread+0x10/0x10 [ 396.296436][ T3031] ret_from_fork_asm+0x1a/0x30 [ 396.296456][ T3031] [ 396.668238][ T3031] team0: Port device wlan1 removed [ 396.786149][ T3031] hsr_slave_0: left promiscuous mode [ 396.792261][ T3031] hsr_slave_1: left promiscuous mode [ 396.798013][ T3031] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 396.805504][ T3031] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 396.813634][ T3031] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 396.821110][ T3031] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 396.835878][ T3031] veth1_macvtap: left promiscuous mode [ 396.841532][ T3031] veth0_macvtap: left promiscuous mode [ 396.847136][ T3031] veth1_vlan: left promiscuous mode [ 396.852475][ T3031] veth0_vlan: left promiscuous mode [ 396.859797][ T51] Bluetooth: hci0: command tx timeout [ 397.045898][ T3031] team0 (unregistering): Port device team_slave_1 removed [ 397.074761][ T3031] team0 (unregistering): Port device team_slave_0 removed [ 397.511162][ T6690] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 397.530179][ T6690] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 397.544001][ T6690] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 397.555491][ T6690] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 397.618847][ T6690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.637460][ T6690] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.649568][ T3031] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.656814][ T3031] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.678104][ T3031] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.685286][ T3031] bridge0: port 2(bridge_slave_1) entered forwarding state [ 397.858464][ T6690] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 397.898912][ T6690] veth0_vlan: entered promiscuous mode [ 397.912994][ T6690] veth1_vlan: entered promiscuous mode [ 397.938594][ T6690] veth0_macvtap: entered promiscuous mode [ 397.947928][ T6690] veth1_macvtap: entered promiscuous mode [ 397.966551][ T6690] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 397.981038][ T6690] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 397.992792][ T6690] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.002822][ T6690] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.012790][ T6690] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.023257][ T6690] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.057335][ T6690] ieee80211 phy7: Selected rate control algorithm 'minstrel_ht' [ 398.082920][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.092564][ T6690] ieee80211 phy8: Selected rate control algorithm 'minstrel_ht' 2025/06/14 03:12:22 executed programs: 602 [ 398.100655][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.125736][ T3031] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.134607][ T3031] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.172236][ T6757] validate_nla: 117 callbacks suppressed [ 398.172255][ T6757] netlink: 'syz.0.616': attribute type 10 has an invalid length. [ 398.195569][ T6757] team0: Port device wlan1 added [ 398.216706][ T6760] netlink: 'syz.0.617': attribute type 10 has an invalid length. [ 398.251445][ T6762] netlink: 'syz.0.618': attribute type 10 has an invalid length. [ 398.276247][ T6765] netlink: 'syz.0.619': attribute type 10 has an invalid length. [ 398.296784][ T6766] netlink: 'syz.0.620': attribute type 10 has an invalid length. [ 398.318253][ T6767] netlink: 'syz.0.621': attribute type 10 has an invalid length. [ 398.343531][ T6770] netlink: 'syz.0.622': attribute type 10 has an invalid length. [ 398.363620][ T6771] netlink: 'syz.0.623': attribute type 10 has an invalid length. [ 398.387125][ T6773] netlink: 'syz.0.624': attribute type 10 has an invalid length. [ 398.413545][ T6775] netlink: 'syz.0.625': attribute type 10 has an invalid length. [ 398.939851][ T51] Bluetooth: hci0: command tx timeout [ 401.020030][ T51] Bluetooth: hci0: command tx timeout [ 403.101569][ T51] Bluetooth: hci0: command tx timeout 2025/06/14 03:12:27 executed programs: 887 [ 403.185377][ T7066] validate_nla: 277 callbacks suppressed [ 403.185393][ T7066] netlink: 'syz.0.903': attribute type 10 has an invalid length. [ 403.210771][ T7067] netlink: 'syz.0.904': attribute type 10 has an invalid length. [ 403.228008][ T7068] netlink: 'syz.0.905': attribute type 10 has an invalid length. [ 403.255351][ T7069] netlink: 'syz.0.906': attribute type 10 has an invalid length. [ 403.274256][ T7070] netlink: 'syz.0.907': attribute type 10 has an invalid length. [ 403.292876][ T7071] netlink: 'syz.0.908': attribute type 10 has an invalid length. [ 403.314367][ T7072] netlink: 'syz.0.909': attribute type 10 has an invalid length. [ 403.332702][ T7073] netlink: 'syz.0.910': attribute type 10 has an invalid length. [ 403.351258][ T7074] netlink: 'syz.0.911': attribute type 10 has an invalid length. [ 403.384599][ T7075] netlink: 'syz.0.912': attribute type 10 has an invalid length.