Warning: Permanently added '10.128.0.29' (ED25519) to the list of known hosts. 2025/05/21 19:04:41 ignoring optional flag "sandboxArg"="0" 2025/05/21 19:04:42 parsed 1 programs [ 296.168129][ T5865] cgroup: Unknown subsys name 'net' [ 296.335727][ T5865] cgroup: Unknown subsys name 'cpuset' [ 296.345384][ T5865] cgroup: Unknown subsys name 'rlimit' [ 297.871038][ T5865] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 300.472647][ T5871] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 300.595375][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 300.604374][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 300.613221][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 300.621823][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 300.629769][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 301.006807][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.015008][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.054920][ T1077] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.062946][ T1077] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.287947][ T5913] chnl_net:caif_netlink_parms(): no params data found [ 302.387794][ T5913] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.395110][ T5913] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.402972][ T5913] bridge_slave_0: entered allmulticast mode [ 302.410884][ T5913] bridge_slave_0: entered promiscuous mode [ 302.419757][ T5913] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.427427][ T5913] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.435782][ T5913] bridge_slave_1: entered allmulticast mode [ 302.443950][ T5913] bridge_slave_1: entered promiscuous mode [ 302.483082][ T5913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.496754][ T5913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.540933][ T5913] team0: Port device team_slave_0 added [ 302.550363][ T5913] team0: Port device team_slave_1 added [ 302.586621][ T5913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.593745][ T5913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.620330][ T5913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 302.634490][ T5913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 302.641554][ T5913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.671361][ T5913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 302.725558][ T5913] hsr_slave_0: entered promiscuous mode [ 302.732156][ T5913] hsr_slave_1: entered promiscuous mode [ 302.903236][ T5913] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 302.915661][ T5913] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 302.925867][ T5913] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 302.936403][ T5913] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 303.015894][ T5913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.038127][ T5913] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.051895][ T1077] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.059063][ T1077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.076838][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.083987][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.288834][ T5913] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 303.335950][ T5913] veth0_vlan: entered promiscuous mode [ 303.348949][ T5913] veth1_vlan: entered promiscuous mode [ 303.379681][ T5913] veth0_macvtap: entered promiscuous mode [ 303.390580][ T5913] veth1_macvtap: entered promiscuous mode [ 303.413481][ T5913] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 303.429182][ T5913] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 303.443173][ T5913] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.452911][ T5913] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.462248][ T5913] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.471146][ T5913] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.598719][ T1147] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.663364][ T1147] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.712236][ T1147] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.785700][ T1147] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2025/05/21 19:04:56 executed programs: 0 [ 306.059828][ T5135] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 306.068279][ T5135] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 306.077341][ T5135] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 306.087187][ T5135] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 306.095689][ T5135] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 306.347503][ T5956] chnl_net:caif_netlink_parms(): no params data found [ 306.362634][ T1147] bridge_slave_1: left allmulticast mode [ 306.368423][ T1147] bridge_slave_1: left promiscuous mode [ 306.375350][ T1147] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.386876][ T1147] bridge_slave_0: left allmulticast mode [ 306.395452][ T1147] bridge_slave_0: left promiscuous mode [ 306.401561][ T1147] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.725442][ T1147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 306.737392][ T1147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 306.749538][ T1147] bond0 (unregistering): Released all slaves [ 306.852736][ T1147] hsr_slave_0: left promiscuous mode [ 306.860523][ T1147] hsr_slave_1: left promiscuous mode [ 306.866583][ T1147] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.875396][ T1147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.884311][ T1147] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.892609][ T1147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.913826][ T1147] veth1_macvtap: left promiscuous mode [ 306.919615][ T1147] veth0_macvtap: left promiscuous mode [ 306.925800][ T1147] veth1_vlan: left promiscuous mode [ 306.931593][ T1147] veth0_vlan: left promiscuous mode [ 307.224254][ T1147] team0 (unregistering): Port device team_slave_1 removed [ 307.248702][ T1147] team0 (unregistering): Port device team_slave_0 removed [ 307.673868][ T5956] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.690337][ T5956] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.697586][ T5956] bridge_slave_0: entered allmulticast mode [ 307.722418][ T5956] bridge_slave_0: entered promiscuous mode [ 307.742299][ T5956] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.749507][ T5956] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.760195][ T5956] bridge_slave_1: entered allmulticast mode [ 307.768623][ T5956] bridge_slave_1: entered promiscuous mode [ 307.845540][ T5956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.874795][ T5956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.936720][ T5956] team0: Port device team_slave_0 added [ 307.947373][ T5956] team0: Port device team_slave_1 added [ 308.022370][ T5956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 308.029352][ T5956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.057662][ T5956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.074148][ T5956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.082214][ T5956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.109174][ T5956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 308.166886][ T5135] Bluetooth: hci0: command tx timeout [ 308.544981][ T5956] hsr_slave_0: entered promiscuous mode [ 308.552886][ T5956] hsr_slave_1: entered promiscuous mode [ 309.185472][ T5956] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 309.197031][ T5956] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 309.209188][ T5956] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 309.221770][ T5956] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 309.312957][ T5956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.342437][ T5956] 8021q: adding VLAN 0 to HW filter on device team0 [ 309.358539][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.365678][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 309.378769][ T1102] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.386000][ T1102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 309.683747][ T5956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 309.746177][ T5956] veth0_vlan: entered promiscuous mode [ 309.759271][ T5956] veth1_vlan: entered promiscuous mode [ 309.805634][ T5956] veth0_macvtap: entered promiscuous mode [ 309.817413][ T5956] veth1_macvtap: entered promiscuous mode [ 309.845910][ T5956] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 309.865451][ T5956] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 309.879500][ T5956] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.892803][ T5956] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.903694][ T5956] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.912995][ T5956] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.012585][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.033272][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.074767][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.087208][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.147011][ T6032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16'. [ 310.175722][ T6032] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 310.193089][ T6032] team0: Port device wlan0 added [ 310.224765][ T6035] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17'. [ 310.241719][ T5135] Bluetooth: hci0: command tx timeout [ 310.269233][ T6036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18'. [ 310.296597][ T6038] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19'. [ 310.328982][ T6041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20'. [ 310.359322][ T6042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21'. [ 310.387002][ T6043] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22'. [ 310.424238][ T6045] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23'. [ 310.456625][ T6047] netlink: 8 bytes leftover after parsing attributes in process `syz.0.24'. [ 310.489527][ T6048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.25'. 2025/05/21 19:05:01 executed programs: 33 [ 312.321047][ T5135] Bluetooth: hci0: command tx timeout [ 314.401987][ T5135] Bluetooth: hci0: command tx timeout [ 315.156568][ T6285] __nla_validate_parse: 216 callbacks suppressed [ 315.156584][ T6285] netlink: 8 bytes leftover after parsing attributes in process `syz.0.242'. [ 315.185983][ T6286] netlink: 8 bytes leftover after parsing attributes in process `syz.0.243'. [ 315.215528][ T6287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.244'. [ 315.242156][ T6288] netlink: 8 bytes leftover after parsing attributes in process `syz.0.245'. [ 315.267921][ T6289] netlink: 8 bytes leftover after parsing attributes in process `syz.0.246'. [ 315.295268][ T6290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.247'. [ 315.318653][ T6291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.248'. [ 315.352890][ T6292] netlink: 8 bytes leftover after parsing attributes in process `syz.0.249'. [ 315.378178][ T6293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.250'. [ 315.401597][ T6294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.251'. 2025/05/21 19:05:06 executed programs: 268 [ 316.483174][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.489733][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.171607][ T6527] __nla_validate_parse: 232 callbacks suppressed [ 320.171624][ T6527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.484'. [ 320.204420][ T6528] netlink: 8 bytes leftover after parsing attributes in process `syz.0.485'. [ 320.231794][ T6529] netlink: 8 bytes leftover after parsing attributes in process `syz.0.486'. [ 320.258779][ T6530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.487'. [ 320.283340][ T6531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.488'. [ 320.307547][ T6532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.489'. [ 320.332689][ T6533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.490'. [ 320.356038][ T6534] netlink: 8 bytes leftover after parsing attributes in process `syz.0.491'. [ 320.385937][ T6535] netlink: 8 bytes leftover after parsing attributes in process `syz.0.492'. [ 320.410115][ T6536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.493'. 2025/05/21 19:05:11 executed programs: 512 [ 322.955792][ T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 322.971097][ T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 322.978904][ T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 322.990004][ T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 322.998444][ T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 323.166063][ T1102] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.199578][ T6661] chnl_net:caif_netlink_parms(): no params data found [ 323.253096][ T1102] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.308684][ T1102] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.338892][ T6661] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.347508][ T6661] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.355725][ T6661] bridge_slave_0: entered allmulticast mode [ 323.363844][ T6661] bridge_slave_0: entered promiscuous mode [ 323.382597][ T1102] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.397065][ T6661] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.404576][ T6661] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.411899][ T6661] bridge_slave_1: entered allmulticast mode [ 323.419355][ T6661] bridge_slave_1: entered promiscuous mode [ 323.461665][ T6661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.475652][ T6661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.571179][ T6661] team0: Port device team_slave_0 added [ 323.582299][ T6661] team0: Port device team_slave_1 added [ 323.588466][ T1102] bridge_slave_1: left allmulticast mode [ 323.594381][ T1102] bridge_slave_1: left promiscuous mode [ 323.600284][ T1102] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.609629][ T1102] bridge_slave_0: left allmulticast mode [ 323.615745][ T1102] bridge_slave_0: left promiscuous mode [ 323.622246][ T1102] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.852731][ T1102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 323.866087][ T1102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 323.876554][ T1102] bond0 (unregistering): Released all slaves [ 323.927029][ T6661] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 323.934201][ T6661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.960669][ T6661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 323.974559][ T6661] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 323.982137][ T6661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.008526][ T6661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.091609][ T6661] hsr_slave_0: entered promiscuous mode [ 324.098028][ T6661] hsr_slave_1: entered promiscuous mode [ 324.105724][ T6661] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 324.114390][ T6661] Cannot create hsr debugfs directory [ 324.139698][ T1102] [ 324.142078][ T1102] ====================================================== [ 324.149091][ T1102] WARNING: possible circular locking dependency detected [ 324.156097][ T1102] 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 Not tainted [ 324.163190][ T1102] ------------------------------------------------------ [ 324.170200][ T1102] kworker/u8:6/1102 is trying to acquire lock: [ 324.176345][ T1102] ffff888026d10e00 (team->team_lock_key){+.+.}-{4:4}, at: team_del_slave+0x32/0x1c0 [ 324.185743][ T1102] [ 324.185743][ T1102] but task is already holding lock: [ 324.193091][ T1102] ffff888029560768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0 [ 324.203454][ T1102] [ 324.203454][ T1102] which lock already depends on the new lock. [ 324.203454][ T1102] [ 324.213840][ T1102] [ 324.213840][ T1102] the existing dependency chain (in reverse order) is: [ 324.222845][ T1102] [ 324.222845][ T1102] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 324.230576][ T1102] lock_acquire+0x120/0x360 [ 324.235597][ T1102] __mutex_lock+0x182/0xe80 [ 324.240614][ T1102] ieee80211_open+0xed/0x1f0 [ 324.245809][ T1102] __dev_open+0x470/0x880 [ 324.250646][ T1102] netif_open+0xaa/0x170 [ 324.255418][ T1102] dev_open+0x125/0x260 [ 324.260091][ T1102] team_add_slave+0xb36/0x2840 [ 324.265359][ T1102] do_set_master+0x533/0x6d0 [ 324.270473][ T1102] do_setlink+0xd47/0x40d0 [ 324.275421][ T1102] rtnl_newlink+0x160b/0x1c70 [ 324.280612][ T1102] rtnetlink_rcv_msg+0x7cf/0xb70 [ 324.286056][ T1102] netlink_rcv_skb+0x21c/0x490 [ 324.291334][ T1102] netlink_unicast+0x75b/0x8d0 [ 324.296605][ T1102] netlink_sendmsg+0x805/0xb30 [ 324.301880][ T1102] __sock_sendmsg+0x21c/0x270 [ 324.307067][ T1102] ____sys_sendmsg+0x505/0x830 [ 324.312369][ T1102] ___sys_sendmsg+0x21f/0x2a0 [ 324.317588][ T1102] __x64_sys_sendmsg+0x19b/0x260 [ 324.323060][ T1102] do_syscall_64+0xf6/0x210 [ 324.328111][ T1102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.334515][ T1102] [ 324.334515][ T1102] -> #0 (team->team_lock_key){+.+.}-{4:4}: [ 324.342680][ T1102] validate_chain+0xb9b/0x2140 [ 324.347956][ T1102] __lock_acquire+0xaac/0xd20 [ 324.353672][ T1102] lock_acquire+0x120/0x360 [ 324.358694][ T1102] __mutex_lock+0x182/0xe80 [ 324.364969][ T1102] team_del_slave+0x32/0x1c0 [ 324.370752][ T1102] team_device_event+0x285/0xa20 [ 324.376918][ T1102] notifier_call_chain+0x1b6/0x3e0 [ 324.382547][ T1102] unregister_netdevice_many_notify+0x15d8/0x2330 [ 324.390782][ T1102] unregister_netdevice_queue+0x33c/0x380 [ 324.398105][ T1102] _cfg80211_unregister_wdev+0x165/0x590 [ 324.404269][ T1102] ieee80211_remove_interfaces+0x49a/0x6d0 [ 324.410595][ T1102] ieee80211_unregister_hw+0x5d/0x2c0 [ 324.416490][ T1102] mac80211_hwsim_del_radio+0x275/0x460 [ 324.422545][ T1102] hwsim_exit_net+0x584/0x640 [ 324.427738][ T1102] cleanup_net+0x71a/0xbd0 [ 324.432669][ T1102] process_scheduled_works+0xade/0x17a0 [ 324.438720][ T1102] worker_thread+0x8a0/0xda0 [ 324.443818][ T1102] kthread+0x711/0x8a0 [ 324.448418][ T1102] ret_from_fork+0x4e/0x80 [ 324.453343][ T1102] ret_from_fork_asm+0x1a/0x30 [ 324.458621][ T1102] [ 324.458621][ T1102] other info that might help us debug this: [ 324.458621][ T1102] [ 324.468834][ T1102] Possible unsafe locking scenario: [ 324.468834][ T1102] [ 324.476286][ T1102] CPU0 CPU1 [ 324.481635][ T1102] ---- ---- [ 324.486980][ T1102] lock(&rdev->wiphy.mtx); [ 324.491482][ T1102] lock(team->team_lock_key); [ 324.498764][ T1102] lock(&rdev->wiphy.mtx); [ 324.505863][ T1102] lock(team->team_lock_key); [ 324.510638][ T1102] [ 324.510638][ T1102] *** DEADLOCK *** [ 324.510638][ T1102] [ 324.518853][ T1102] 5 locks held by kworker/u8:6/1102: [ 324.524123][ T1102] #0: ffff88801aef6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 324.535008][ T1102] #1: ffffc90003cffc60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 324.545539][ T1102] #2: ffffffff8f2edd10 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x145/0xbd0 [ 324.554949][ T1102] #3: ffffffff8f2fa848 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_unregister_hw+0x55/0x2c0 [ 324.564806][ T1102] #4: ffff888029560768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0 [ 324.575624][ T1102] [ 324.575624][ T1102] stack backtrace: [ 324.581503][ T1102] CPU: 1 UID: 0 PID: 1102 Comm: kworker/u8:6 Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(full) [ 324.581524][ T1102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 324.581537][ T1102] Workqueue: netns cleanup_net [ 324.581563][ T1102] Call Trace: [ 324.581570][ T1102] [ 324.581577][ T1102] dump_stack_lvl+0x189/0x250 [ 324.581606][ T1102] ? __pfx_dump_stack_lvl+0x10/0x10 [ 324.581631][ T1102] ? __pfx__printk+0x10/0x10 [ 324.581649][ T1102] ? print_lock_name+0xde/0x100 [ 324.581678][ T1102] print_circular_bug+0x2ee/0x310 [ 324.581699][ T1102] check_noncircular+0x134/0x160 [ 324.581720][ T1102] validate_chain+0xb9b/0x2140 [ 324.581740][ T1102] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 324.581761][ T1102] ? lockdep_hardirqs_on+0x9c/0x150 [ 324.581783][ T1102] ? srso_alias_return_thunk+0x5/0xfbef5 [ 324.581805][ T1102] ? srso_alias_return_thunk+0x5/0xfbef5 [ 324.581828][ T1102] __lock_acquire+0xaac/0xd20 [ 324.581855][ T1102] ? team_del_slave+0x32/0x1c0 [ 324.581870][ T1102] lock_acquire+0x120/0x360 [ 324.581901][ T1102] ? team_del_slave+0x32/0x1c0 [ 324.581919][ T1102] ? __mutex_trylock_common+0x153/0x260 [ 324.581940][ T1102] __mutex_lock+0x182/0xe80 [ 324.581962][ T1102] ? team_del_slave+0x32/0x1c0 [ 324.581977][ T1102] ? rcu_is_watching+0x15/0xb0 [ 324.581999][ T1102] ? team_del_slave+0x32/0x1c0 [ 324.582015][ T1102] ? __pfx___mutex_lock+0x10/0x10 [ 324.582038][ T1102] ? srso_alias_return_thunk+0x5/0xfbef5 [ 324.582058][ T1102] ? bond_netdev_event+0xd9/0xe80 [ 324.582077][ T1102] ? __pfx___mutex_lock+0x10/0x10 [ 324.582100][ T1102] ? __pfx_bond_netdev_event+0x10/0x10 [ 324.582119][ T1102] ? srso_alias_return_thunk+0x5/0xfbef5 [ 324.582142][ T1102] team_del_slave+0x32/0x1c0 [ 324.582159][ T1102] team_device_event+0x285/0xa20 [ 324.582181][ T1102] notifier_call_chain+0x1b6/0x3e0 [ 324.582202][ T1102] unregister_netdevice_many_notify+0x15d8/0x2330 [ 324.582227][ T1102] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 324.582243][ T1102] ? call_rcu+0x6dd/0x990 [ 324.582258][ T1102] ? srso_alias_return_thunk+0x5/0xfbef5 [ 324.582278][ T1102] ? lockdep_hardirqs_on+0x9c/0x150 [ 324.582299][ T1102] ? srso_alias_return_thunk+0x5/0xfbef5 [ 324.582329][ T1102] unregister_netdevice_queue+0x33c/0x380 [ 324.582358][ T1102] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 324.582386][ T1102] ? srso_alias_return_thunk+0x5/0xfbef5 [ 324.582408][ T1102] _cfg80211_unregister_wdev+0x165/0x590 [ 324.582427][ T1102] ieee80211_remove_interfaces+0x49a/0x6d0 [ 324.582453][ T1102] ? __pfx_synchronize_rcu+0x10/0x10 [ 324.582471][ T1102] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 324.582496][ T1102] ? rcu_is_watching+0x15/0xb0 [ 324.582511][ T1102] ? srso_alias_return_thunk+0x5/0xfbef5 [ 324.582539][ T1102] ieee80211_unregister_hw+0x5d/0x2c0 [ 324.582562][ T1102] mac80211_hwsim_del_radio+0x275/0x460 [ 324.582582][ T1102] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 324.582604][ T1102] hwsim_exit_net+0x584/0x640 [ 324.582631][ T1102] ? __pfx_hwsim_exit_net+0x10/0x10 [ 324.582656][ T1102] ? srso_alias_return_thunk+0x5/0xfbef5 [ 324.582676][ T1102] ? srso_alias_return_thunk+0x5/0xfbef5 [ 324.582696][ T1102] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 324.582718][ T1102] cleanup_net+0x71a/0xbd0 [ 324.582741][ T1102] ? __pfx_cleanup_net+0x10/0x10 [ 324.582762][ T1102] ? srso_alias_return_thunk+0x5/0xfbef5 [ 324.582784][ T1102] ? _raw_spin_unlock_irq+0x23/0x50 [ 324.582803][ T1102] ? process_scheduled_works+0x9ec/0x17a0 [ 324.582819][ T1102] ? process_scheduled_works+0x9ec/0x17a0 [ 324.582836][ T1102] process_scheduled_works+0xade/0x17a0 [ 324.582864][ T1102] ? __pfx_process_scheduled_works+0x10/0x10 [ 324.582895][ T1102] ? srso_alias_return_thunk+0x5/0xfbef5 [ 324.582918][ T1102] worker_thread+0x8a0/0xda0 [ 324.582936][ T1102] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 324.582960][ T1102] ? __kthread_parkme+0x7b/0x200 [ 324.582982][ T1102] kthread+0x711/0x8a0 [ 324.583008][ T1102] ? __pfx_worker_thread+0x10/0x10 [ 324.583024][ T1102] ? __pfx_kthread+0x10/0x10 [ 324.583045][ T1102] ? srso_alias_return_thunk+0x5/0xfbef5 [ 324.583065][ T1102] ? __pfx_kthread+0x10/0x10 [ 324.583085][ T1102] ? _raw_spin_unlock_irq+0x23/0x50 [ 324.583104][ T1102] ? srso_alias_return_thunk+0x5/0xfbef5 [ 324.583123][ T1102] ? lockdep_hardirqs_on+0x9c/0x150 [ 324.583145][ T1102] ? __pfx_kthread+0x10/0x10 [ 324.583165][ T1102] ret_from_fork+0x4e/0x80 [ 324.583183][ T1102] ? __pfx_kthread+0x10/0x10 [ 324.583203][ T1102] ret_from_fork_asm+0x1a/0x30 [ 324.583226][ T1102] [ 325.018843][ T1102] team0: Port device wlan0 removed [ 325.040576][ T55] Bluetooth: hci1: command tx timeout [ 325.074163][ T1102] hsr_slave_0: left promiscuous mode [ 325.080515][ T1102] hsr_slave_1: left promiscuous mode [ 325.086429][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 325.094942][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 325.105090][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 325.113541][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 325.132439][ T1102] veth1_macvtap: left promiscuous mode [ 325.138026][ T1102] veth0_macvtap: left promiscuous mode [ 325.147692][ T1102] veth1_vlan: left promiscuous mode [ 325.153080][ T1102] veth0_vlan: left promiscuous mode [ 325.320325][ T1102] team0 (unregistering): Port device team_slave_1 removed [ 325.339554][ T1102] team0 (unregistering): Port device team_slave_0 removed [ 325.863446][ T6661] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 325.880733][ T6661] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 325.890420][ T6661] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 325.901863][ T6661] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 325.964763][ T6661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.982124][ T6661] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.993186][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.000301][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.013136][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.020511][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.198196][ T6661] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 326.239614][ T6661] veth0_vlan: entered promiscuous mode [ 326.251221][ T6661] veth1_vlan: entered promiscuous mode [ 326.281172][ T6661] veth0_macvtap: entered promiscuous mode [ 326.290285][ T6661] veth1_macvtap: entered promiscuous mode [ 326.307441][ T6661] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.323280][ T6661] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.334905][ T6661] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.345354][ T6661] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.354945][ T6661] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.365111][ T6661] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.398328][ T6661] ieee80211 phy7: Selected rate control algorithm 'minstrel_ht' [ 326.429181][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.433063][ T6661] ieee80211 phy8: Selected rate control algorithm 'minstrel_ht' 2025/05/21 19:05:17 executed programs: 602 [ 326.447849][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.472022][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.479876][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.517949][ T6723] __nla_validate_parse: 122 callbacks suppressed [ 326.517971][ T6723] netlink: 8 bytes leftover after parsing attributes in process `syz.0.616'. [ 326.543701][ T6723] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 326.555927][ T6723] team0: Port device wlan0 added [ 326.576513][ T6727] netlink: 8 bytes leftover after parsing attributes in process `syz.0.617'. [ 326.603068][ T6728] netlink: 8 bytes leftover after parsing attributes in process `syz.0.618'. [ 326.624372][ T6730] netlink: 8 bytes leftover after parsing attributes in process `syz.0.619'. [ 326.653178][ T6732] netlink: 8 bytes leftover after parsing attributes in process `syz.0.620'. [ 326.677139][ T6734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.621'. [ 326.698730][ T6735] netlink: 8 bytes leftover after parsing attributes in process `syz.0.622'. [ 326.726790][ T6737] netlink: 8 bytes leftover after parsing attributes in process `syz.0.623'. [ 326.751639][ T6738] netlink: 8 bytes leftover after parsing attributes in process `syz.0.624'. [ 326.778646][ T6740] netlink: 8 bytes leftover after parsing attributes in process `syz.0.625'. [ 327.120141][ T55] Bluetooth: hci1: command tx timeout [ 329.200159][ T55] Bluetooth: hci1: command tx timeout [ 331.280276][ T55] Bluetooth: hci1: command tx timeout 2025/05/21 19:05:22 executed programs: 887 [ 331.525591][ T7030] __nla_validate_parse: 277 callbacks suppressed [ 331.525607][ T7030] netlink: 8 bytes leftover after parsing attributes in process `syz.0.903'. [ 331.553178][ T7031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.904'. [ 331.571979][ T7032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.905'. [ 331.606141][ T7033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.906'. [ 331.626347][ T7034] netlink: 8 bytes leftover after parsing attributes in process `syz.0.907'. [ 331.645463][ T7035] netlink: 8 bytes leftover after parsing attributes in process `syz.0.908'. [ 331.665086][ T7036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.909'. [ 331.684021][ T7037] netlink: 8 bytes leftover after parsing attributes in process `syz.0.910'. [ 331.702560][ T7038] netlink: 8 bytes leftover after parsing attributes in process `syz.0.911'. [ 331.736571][ T7039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.912'.