Warning: Permanently added '10.128.1.14' (ED25519) to the list of known hosts. 2025/06/15 05:27:13 ignoring optional flag "sandboxArg"="0" 2025/06/15 05:27:15 parsed 1 programs [ 89.453002][ T5838] cgroup: Unknown subsys name 'net' [ 89.544284][ T5838] cgroup: Unknown subsys name 'cpuset' [ 89.553741][ T5838] cgroup: Unknown subsys name 'rlimit' [ 91.365417][ T5838] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.999546][ T2157] cfg80211: failed to load regulatory.db [ 94.327042][ T5852] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.767007][ T5872] chnl_net:caif_netlink_parms(): no params data found [ 95.861776][ T5872] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.869197][ T5872] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.876398][ T5872] bridge_slave_0: entered allmulticast mode [ 95.884453][ T5872] bridge_slave_0: entered promiscuous mode [ 95.894411][ T5872] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.901841][ T5872] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.909041][ T5872] bridge_slave_1: entered allmulticast mode [ 95.916126][ T5872] bridge_slave_1: entered promiscuous mode [ 95.954660][ T5872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.966782][ T5872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.002900][ T5872] team0: Port device team_slave_0 added [ 96.011129][ T5872] team0: Port device team_slave_1 added [ 96.038488][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.045445][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.072010][ T5872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.084787][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.091776][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.117752][ T5872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.161726][ T5872] hsr_slave_0: entered promiscuous mode [ 96.168679][ T5872] hsr_slave_1: entered promiscuous mode [ 96.314681][ T5872] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.326764][ T5872] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.337420][ T5872] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.347700][ T5872] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.380758][ T5872] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.388048][ T5872] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.395667][ T5872] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.402858][ T5872] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.462679][ T5872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.482561][ T1035] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.492955][ T1035] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.508319][ T5872] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.522830][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.529969][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.543362][ T1035] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.550560][ T1035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.744667][ T5872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.789599][ T5872] veth0_vlan: entered promiscuous mode [ 96.801045][ T5872] veth1_vlan: entered promiscuous mode [ 96.832452][ T5872] veth0_macvtap: entered promiscuous mode [ 96.841635][ T5872] veth1_macvtap: entered promiscuous mode [ 96.861421][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.875822][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.889892][ T5872] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.899505][ T5872] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.908344][ T5872] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.917050][ T5872] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.036956][ T1097] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.112165][ T1097] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.196108][ T1097] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.305082][ T1097] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.616809][ T5907] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.625408][ T5907] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.636161][ T5907] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.648246][ T5907] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.656746][ T5907] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.289754][ T1107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.302589][ T1107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.332249][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.340764][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/06/15 05:27:27 executed programs: 0 [ 98.935821][ T5907] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.944956][ T5907] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 98.952852][ T5907] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 98.963526][ T5907] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.972912][ T5907] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 99.132493][ T5938] chnl_net:caif_netlink_parms(): no params data found [ 99.206841][ T5938] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.214392][ T5938] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.222194][ T5938] bridge_slave_0: entered allmulticast mode [ 99.229946][ T5938] bridge_slave_0: entered promiscuous mode [ 99.238736][ T5938] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.245930][ T5938] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.253229][ T5938] bridge_slave_1: entered allmulticast mode [ 99.260841][ T5938] bridge_slave_1: entered promiscuous mode [ 99.300406][ T5938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.312106][ T5938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.346521][ T5938] team0: Port device team_slave_0 added [ 99.354900][ T5938] team0: Port device team_slave_1 added [ 99.386997][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.394086][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.420869][ T5938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.433668][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.441032][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.467624][ T5938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.512728][ T5938] hsr_slave_0: entered promiscuous mode [ 99.519692][ T5938] hsr_slave_1: entered promiscuous mode [ 99.525778][ T5938] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.534198][ T5938] Cannot create hsr debugfs directory [ 100.296675][ T1097] bridge_slave_1: left allmulticast mode [ 100.304181][ T1097] bridge_slave_1: left promiscuous mode [ 100.311540][ T1097] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.323914][ T1097] bridge_slave_0: left allmulticast mode [ 100.330379][ T1097] bridge_slave_0: left promiscuous mode [ 100.336112][ T1097] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.591418][ T1097] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.602925][ T1097] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.613086][ T1097] bond0 (unregistering): Released all slaves [ 100.719458][ T1097] hsr_slave_0: left promiscuous mode [ 100.725801][ T1097] hsr_slave_1: left promiscuous mode [ 100.734568][ T1097] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.742302][ T1097] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.759655][ T1097] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.768500][ T1097] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.792168][ T1097] veth1_macvtap: left promiscuous mode [ 100.799095][ T1097] veth0_macvtap: left promiscuous mode [ 100.804828][ T1097] veth1_vlan: left promiscuous mode [ 100.813737][ T1097] veth0_vlan: left promiscuous mode [ 101.047159][ T5156] Bluetooth: hci0: command tx timeout [ 101.336664][ T1097] team0 (unregistering): Port device team_slave_1 removed [ 101.372325][ T1097] team0 (unregistering): Port device team_slave_0 removed [ 101.923935][ T5938] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 101.951238][ T5938] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 101.973066][ T5938] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 101.985857][ T5938] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 102.700327][ T5938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.744593][ T5938] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.767338][ T1035] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.774523][ T1035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.840042][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.847220][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.117960][ T5156] Bluetooth: hci0: command tx timeout [ 103.305055][ T5938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.365133][ T5938] veth0_vlan: entered promiscuous mode [ 103.393512][ T5938] veth1_vlan: entered promiscuous mode [ 103.435002][ T5938] veth0_macvtap: entered promiscuous mode [ 103.451227][ T5938] veth1_macvtap: entered promiscuous mode [ 103.486542][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.510125][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.526464][ T5938] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.535566][ T5938] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.544519][ T5938] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.553351][ T5938] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.620755][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.630683][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.658850][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.666719][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.711405][ T6000] netlink: 'syz.0.16': attribute type 10 has an invalid length. [ 103.734239][ T6000] team0: Port device wlan1 added [ 103.755890][ T6001] netlink: 'syz.0.17': attribute type 10 has an invalid length. [ 103.785084][ T6002] netlink: 'syz.0.18': attribute type 10 has an invalid length. [ 103.809382][ T6003] netlink: 'syz.0.19': attribute type 10 has an invalid length. [ 103.830458][ T6004] netlink: 'syz.0.20': attribute type 10 has an invalid length. [ 103.853980][ T6005] netlink: 'syz.0.21': attribute type 10 has an invalid length. 2025/06/15 05:27:32 executed programs: 8 [ 103.878282][ T6006] netlink: 'syz.0.22': attribute type 10 has an invalid length. [ 103.901056][ T6007] netlink: 'syz.0.23': attribute type 10 has an invalid length. [ 103.925856][ T6008] netlink: 'syz.0.24': attribute type 10 has an invalid length. [ 103.950142][ T6009] netlink: 'syz.0.25': attribute type 10 has an invalid length. [ 105.197888][ T5156] Bluetooth: hci0: command tx timeout [ 107.288436][ T5156] Bluetooth: hci0: command tx timeout [ 108.719822][ T6253] validate_nla: 242 callbacks suppressed [ 108.719836][ T6253] netlink: 'syz.0.268': attribute type 10 has an invalid length. [ 108.751256][ T6254] netlink: 'syz.0.269': attribute type 10 has an invalid length. [ 108.771015][ T6255] netlink: 'syz.0.270': attribute type 10 has an invalid length. [ 108.790525][ T6256] netlink: 'syz.0.271': attribute type 10 has an invalid length. [ 108.823748][ T6257] netlink: 'syz.0.272': attribute type 10 has an invalid length. [ 108.847918][ T6258] netlink: 'syz.0.273': attribute type 10 has an invalid length. 2025/06/15 05:27:37 executed programs: 261 [ 108.869543][ T6259] netlink: 'syz.0.274': attribute type 10 has an invalid length. [ 108.891944][ T6260] netlink: 'syz.0.275': attribute type 10 has an invalid length. [ 108.913319][ T6261] netlink: 'syz.0.276': attribute type 10 has an invalid length. [ 108.934480][ T6262] netlink: 'syz.0.277': attribute type 10 has an invalid length. [ 113.744042][ T6518] validate_nla: 254 callbacks suppressed [ 113.744056][ T6518] netlink: 'syz.0.532': attribute type 10 has an invalid length. [ 113.775573][ T6519] netlink: 'syz.0.533': attribute type 10 has an invalid length. [ 113.795066][ T6520] netlink: 'syz.0.534': attribute type 10 has an invalid length. [ 113.815680][ T6521] netlink: 'syz.0.535': attribute type 10 has an invalid length. [ 113.836253][ T6522] netlink: 'syz.0.536': attribute type 10 has an invalid length. [ 113.857159][ T6523] netlink: 'syz.0.537': attribute type 10 has an invalid length. [ 113.880855][ T6524] netlink: 'syz.0.538': attribute type 10 has an invalid length. 2025/06/15 05:27:42 executed programs: 527 [ 113.902754][ T6525] netlink: 'syz.0.539': attribute type 10 has an invalid length. [ 113.925680][ T6526] netlink: 'syz.0.540': attribute type 10 has an invalid length. [ 113.946639][ T6527] netlink: 'syz.0.541': attribute type 10 has an invalid length. [ 115.409737][ T5907] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 115.423075][ T5907] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 115.432118][ T5907] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 115.441322][ T5907] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 115.449254][ T5907] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 115.604101][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.627076][ T6605] chnl_net:caif_netlink_parms(): no params data found [ 115.674348][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.727073][ T6605] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.734937][ T6605] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.742298][ T6605] bridge_slave_0: entered allmulticast mode [ 115.749891][ T6605] bridge_slave_0: entered promiscuous mode [ 115.765748][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.780840][ T6605] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.788186][ T6605] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.795333][ T6605] bridge_slave_1: entered allmulticast mode [ 115.803130][ T6605] bridge_slave_1: entered promiscuous mode [ 115.833622][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.863300][ T6605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.875272][ T6605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.916139][ T6605] team0: Port device team_slave_0 added [ 115.925352][ T6605] team0: Port device team_slave_1 added [ 115.960039][ T6605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.967019][ T6605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.993235][ T6605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.017174][ T6605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.024544][ T6605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.050973][ T6605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.155789][ T6605] hsr_slave_0: entered promiscuous mode [ 116.163604][ T6605] hsr_slave_1: entered promiscuous mode [ 116.171579][ T13] bridge_slave_1: left allmulticast mode [ 116.177260][ T13] bridge_slave_1: left promiscuous mode [ 116.183646][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.193622][ T13] bridge_slave_0: left allmulticast mode [ 116.200099][ T13] bridge_slave_0: left promiscuous mode [ 116.205816][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.491419][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.501984][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.512526][ T13] bond0 (unregistering): Released all slaves [ 116.671737][ T13] [ 116.674124][ T13] ====================================================== [ 116.681166][ T13] WARNING: possible circular locking dependency detected [ 116.688205][ T13] 6.16.0-rc1-next-20250613-syzkaller #0 Not tainted [ 116.694811][ T13] ------------------------------------------------------ [ 116.701853][ T13] kworker/u8:1/13 is trying to acquire lock: [ 116.707849][ T13] ffff8880753c4e00 (team->team_lock_key#2){+.+.}-{4:4}, at: team_del_slave+0x32/0x1c0 [ 116.717482][ T13] [ 116.717482][ T13] but task is already holding lock: [ 116.724867][ T13] ffff888029eb8768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0 [ 116.735266][ T13] [ 116.735266][ T13] which lock already depends on the new lock. [ 116.735266][ T13] [ 116.745691][ T13] [ 116.745691][ T13] the existing dependency chain (in reverse order) is: [ 116.754722][ T13] [ 116.754722][ T13] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 116.762491][ T13] lock_acquire+0x120/0x360 [ 116.767550][ T13] __mutex_lock+0x182/0xe80 [ 116.772613][ T13] ieee80211_open+0xed/0x1f0 [ 116.777848][ T13] __dev_open+0x470/0x880 [ 116.782709][ T13] netif_open+0xaa/0x170 [ 116.787475][ T13] dev_open+0x125/0x260 [ 116.792147][ T13] team_add_slave+0xb36/0x2840 [ 116.797434][ T13] do_set_master+0x530/0x6d0 [ 116.802631][ T13] do_setlink+0xcf0/0x41c0 [ 116.807563][ T13] rtnl_newlink+0x160b/0x1c70 [ 116.812751][ T13] rtnetlink_rcv_msg+0x7cc/0xb70 [ 116.818206][ T13] netlink_rcv_skb+0x208/0x470 [ 116.823486][ T13] netlink_unicast+0x75b/0x8d0 [ 116.828770][ T13] netlink_sendmsg+0x805/0xb30 [ 116.834052][ T13] __sock_sendmsg+0x21c/0x270 [ 116.839251][ T13] ____sys_sendmsg+0x505/0x830 [ 116.844534][ T13] ___sys_sendmsg+0x21f/0x2a0 [ 116.849728][ T13] __x64_sys_sendmsg+0x19b/0x260 [ 116.855191][ T13] do_syscall_64+0xfa/0x3b0 [ 116.860218][ T13] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.866625][ T13] [ 116.866625][ T13] -> #0 (team->team_lock_key#2){+.+.}-{4:4}: [ 116.874805][ T13] validate_chain+0xb9b/0x2140 [ 116.880089][ T13] __lock_acquire+0xab9/0xd20 [ 116.885300][ T13] lock_acquire+0x120/0x360 [ 116.890329][ T13] __mutex_lock+0x182/0xe80 [ 116.895360][ T13] team_del_slave+0x32/0x1c0 [ 116.900473][ T13] team_device_event+0x285/0xa20 [ 116.906012][ T13] notifier_call_chain+0x1b6/0x3e0 [ 116.911636][ T13] unregister_netdevice_many_notify+0x15d8/0x2320 [ 116.918765][ T13] unregister_netdevice_queue+0x33c/0x380 [ 116.925001][ T13] _cfg80211_unregister_wdev+0x165/0x590 [ 116.931149][ T13] ieee80211_remove_interfaces+0x49a/0x6d0 [ 116.937488][ T13] ieee80211_unregister_hw+0x5d/0x2c0 [ 116.943381][ T13] mac80211_hwsim_del_radio+0x275/0x460 [ 116.949536][ T13] hwsim_exit_net+0x584/0x640 [ 116.954733][ T13] ops_undo_list+0x497/0x990 [ 116.959924][ T13] cleanup_net+0x4c5/0x800 [ 116.964853][ T13] process_scheduled_works+0xade/0x17b0 [ 116.970920][ T13] worker_thread+0x8a0/0xda0 [ 116.976024][ T13] kthread+0x711/0x8a0 [ 116.980616][ T13] ret_from_fork+0x3f9/0x770 [ 116.985736][ T13] ret_from_fork_asm+0x1a/0x30 [ 116.991016][ T13] [ 116.991016][ T13] other info that might help us debug this: [ 116.991016][ T13] [ 117.001236][ T13] Possible unsafe locking scenario: [ 117.001236][ T13] [ 117.008679][ T13] CPU0 CPU1 [ 117.014034][ T13] ---- ---- [ 117.019393][ T13] lock(&rdev->wiphy.mtx); [ 117.023898][ T13] lock(team->team_lock_key#2); [ 117.031374][ T13] lock(&rdev->wiphy.mtx); [ 117.038411][ T13] lock(team->team_lock_key#2); [ 117.043371][ T13] [ 117.043371][ T13] *** DEADLOCK *** [ 117.043371][ T13] [ 117.051522][ T13] 5 locks held by kworker/u8:1/13: [ 117.057150][ T13] #0: ffff88801b2fe148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 117.068049][ T13] #1: ffffc90000127bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 117.078605][ T13] #2: ffffffff8f507cd0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 117.087922][ T13] #3: ffffffff8f5148c8 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_unregister_hw+0x55/0x2c0 [ 117.097764][ T13] #4: ffff888029eb8768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0 [ 117.108566][ T13] [ 117.108566][ T13] stack backtrace: [ 117.114453][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted 6.16.0-rc1-next-20250613-syzkaller #0 PREEMPT(full) [ 117.114471][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 117.114480][ T13] Workqueue: netns cleanup_net [ 117.114495][ T13] Call Trace: [ 117.114502][ T13] [ 117.114509][ T13] dump_stack_lvl+0x189/0x250 [ 117.114533][ T13] ? __pfx_dump_stack_lvl+0x10/0x10 [ 117.114553][ T13] ? __pfx__printk+0x10/0x10 [ 117.114568][ T13] ? print_lock_name+0xde/0x100 [ 117.114583][ T13] print_circular_bug+0x2ee/0x310 [ 117.114598][ T13] check_noncircular+0x134/0x160 [ 117.114614][ T13] validate_chain+0xb9b/0x2140 [ 117.114630][ T13] ? lockdep_hardirqs_on+0x9c/0x150 [ 117.114652][ T13] __lock_acquire+0xab9/0xd20 [ 117.114673][ T13] ? team_del_slave+0x32/0x1c0 [ 117.114690][ T13] lock_acquire+0x120/0x360 [ 117.114708][ T13] ? team_del_slave+0x32/0x1c0 [ 117.114727][ T13] ? __mutex_trylock_common+0x153/0x260 [ 117.114743][ T13] __mutex_lock+0x182/0xe80 [ 117.114762][ T13] ? team_del_slave+0x32/0x1c0 [ 117.114779][ T13] ? rcu_is_watching+0x15/0xb0 [ 117.114802][ T13] ? team_del_slave+0x32/0x1c0 [ 117.114820][ T13] ? __pfx___mutex_lock+0x10/0x10 [ 117.114839][ T13] ? bond_netdev_event+0xd9/0xe80 [ 117.114859][ T13] ? __pfx___mutex_lock+0x10/0x10 [ 117.114878][ T13] ? __pfx_bond_netdev_event+0x10/0x10 [ 117.114900][ T13] team_del_slave+0x32/0x1c0 [ 117.114919][ T13] team_device_event+0x285/0xa20 [ 117.114933][ T13] notifier_call_chain+0x1b6/0x3e0 [ 117.114948][ T13] unregister_netdevice_many_notify+0x15d8/0x2320 [ 117.114978][ T13] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 117.114998][ T13] ? __lock_acquire+0xab9/0xd20 [ 117.115022][ T13] unregister_netdevice_queue+0x33c/0x380 [ 117.115040][ T13] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 117.115060][ T13] _cfg80211_unregister_wdev+0x165/0x590 [ 117.115076][ T13] ieee80211_remove_interfaces+0x49a/0x6d0 [ 117.115096][ T13] ? __pfx_synchronize_rcu+0x10/0x10 [ 117.115110][ T13] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 117.115130][ T13] ? rcu_is_watching+0x15/0xb0 [ 117.115152][ T13] ieee80211_unregister_hw+0x5d/0x2c0 [ 117.115170][ T13] mac80211_hwsim_del_radio+0x275/0x460 [ 117.115192][ T13] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 117.115215][ T13] hwsim_exit_net+0x584/0x640 [ 117.115232][ T13] ? __pfx_hwsim_exit_net+0x10/0x10 [ 117.115250][ T13] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 117.115266][ T13] ops_undo_list+0x497/0x990 [ 117.115282][ T13] ? __pfx_ops_undo_list+0x10/0x10 [ 117.115298][ T13] cleanup_net+0x4c5/0x800 [ 117.115311][ T13] ? __pfx_cleanup_net+0x10/0x10 [ 117.115325][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 117.115341][ T13] ? process_scheduled_works+0x9ef/0x17b0 [ 117.115361][ T13] ? process_scheduled_works+0x9ef/0x17b0 [ 117.115380][ T13] process_scheduled_works+0xade/0x17b0 [ 117.115408][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 117.115432][ T13] worker_thread+0x8a0/0xda0 [ 117.115451][ T13] kthread+0x711/0x8a0 [ 117.115467][ T13] ? __pfx_worker_thread+0x10/0x10 [ 117.115486][ T13] ? __pfx_kthread+0x10/0x10 [ 117.115501][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 117.115532][ T13] ? lockdep_hardirqs_on+0x9c/0x150 [ 117.115549][ T13] ? __pfx_kthread+0x10/0x10 [ 117.115563][ T13] ret_from_fork+0x3f9/0x770 [ 117.115584][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 117.115603][ T13] ? __switch_to_asm+0x39/0x70 [ 117.115617][ T13] ? __switch_to_asm+0x33/0x70 [ 117.115629][ T13] ? __pfx_kthread+0x10/0x10 [ 117.115644][ T13] ret_from_fork_asm+0x1a/0x30 [ 117.115662][ T13] [ 117.483238][ T13] team0: Port device wlan1 removed [ 117.517521][ T5907] Bluetooth: hci0: command tx timeout [ 117.675828][ T13] hsr_slave_0: left promiscuous mode [ 117.684564][ T13] hsr_slave_1: left promiscuous mode [ 117.693874][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.702212][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.713296][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.721590][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.732964][ T13] veth1_macvtap: left promiscuous mode [ 117.739345][ T13] veth0_macvtap: left promiscuous mode [ 117.744952][ T13] veth1_vlan: left promiscuous mode [ 117.751400][ T13] veth0_vlan: left promiscuous mode [ 117.948472][ T13] team0 (unregistering): Port device team_slave_1 removed [ 117.975853][ T13] team0 (unregistering): Port device team_slave_0 removed [ 118.236507][ T6605] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 118.248190][ T6605] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 118.259181][ T6605] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 118.274059][ T6605] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 118.365257][ T6605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.386323][ T6605] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.409474][ T1097] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.416765][ T1097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.427484][ T1097] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.434818][ T1097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.611569][ T6605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.652596][ T6605] veth0_vlan: entered promiscuous mode [ 118.664677][ T6605] veth1_vlan: entered promiscuous mode [ 118.691948][ T6605] veth0_macvtap: entered promiscuous mode [ 118.709156][ T6605] veth1_macvtap: entered promiscuous mode [ 118.725168][ T6605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.739214][ T6605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.752270][ T6605] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.762985][ T6605] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.772076][ T6605] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.781141][ T6605] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.815826][ T6605] ieee80211 phy7: Selected rate control algorithm 'minstrel_ht' [ 118.841570][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.842997][ T6605] ieee80211 phy8: Selected rate control algorithm 'minstrel_ht' [ 118.852992][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.882051][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.890112][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.934004][ T6680] validate_nla: 74 callbacks suppressed [ 118.934025][ T6680] netlink: 'syz.0.616': attribute type 10 has an invalid length. [ 118.954236][ T6680] team0: Port device wlan1 added 2025/06/15 05:27:47 executed programs: 603 [ 118.975470][ T6684] netlink: 'syz.0.617': attribute type 10 has an invalid length. [ 119.004222][ T6685] netlink: 'syz.0.618': attribute type 10 has an invalid length. [ 119.031135][ T6688] netlink: 'syz.0.619': attribute type 10 has an invalid length. [ 119.054371][ T6689] netlink: 'syz.0.620': attribute type 10 has an invalid length. [ 119.079985][ T6693] netlink: 'syz.0.621': attribute type 10 has an invalid length. [ 119.103949][ T6694] netlink: 'syz.0.622': attribute type 10 has an invalid length. [ 119.127188][ T6696] netlink: 'syz.0.623': attribute type 10 has an invalid length. [ 119.151661][ T6698] netlink: 'syz.0.624': attribute type 10 has an invalid length. [ 119.173557][ T6699] netlink: 'syz.0.625': attribute type 10 has an invalid length. [ 119.597483][ T5907] Bluetooth: hci0: command tx timeout [ 121.677501][ T5907] Bluetooth: hci0: command tx timeout [ 123.758149][ T5907] Bluetooth: hci0: command tx timeout [ 123.943659][ T7003] validate_nla: 282 callbacks suppressed [ 123.943673][ T7003] netlink: 'syz.0.908': attribute type 10 has an invalid length. [ 123.965357][ T7004] netlink: 'syz.0.909': attribute type 10 has an invalid length. [ 123.980563][ T7005] netlink: 'syz.0.910': attribute type 10 has an invalid length. 2025/06/15 05:27:52 executed programs: 898 [ 124.012261][ T7006] netlink: 'syz.0.911': attribute type 10 has an invalid length. [ 124.029458][ T7007] netlink: 'syz.0.912': attribute type 10 has an invalid length. [ 124.044501][ T7008] netlink: 'syz.0.913': attribute type 10 has an invalid length. [ 124.072354][ T7009] netlink: 'syz.0.914': attribute type 10 has an invalid length. [ 124.089265][ T7010] netlink: 'syz.0.915': attribute type 10 has an invalid length. [ 124.104326][ T7011] netlink: 'syz.0.916': attribute type 10 has an invalid length. [ 124.131561][ T7012] netlink: 'syz.0.917': attribute type 10 has an invalid length.