Warning: Permanently added '10.128.10.34' (ED25519) to the list of known hosts. 1970/01/01 00:00:47 ignoring optional flag "sandboxArg"="0" 1970/01/01 00:00:48 parsed 1 programs [ 51.947219][ T6540] cgroup: Unknown subsys name 'net' [ 52.074326][ T6540] cgroup: Unknown subsys name 'cpuset' [ 52.077915][ T6540] cgroup: Unknown subsys name 'rlimit' [ 52.331525][ T6540] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 63.477200][ T6546] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 64.386902][ T2251] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.389506][ T2251] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.404034][ T230] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.404109][ T230] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.772754][ T2409] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.774749][ T2409] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.181188][ T6593] chnl_net:caif_netlink_parms(): no params data found [ 65.404282][ T6593] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.404422][ T6593] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.404602][ T6593] bridge_slave_0: entered allmulticast mode [ 65.406782][ T6593] bridge_slave_0: entered promiscuous mode [ 65.409619][ T6593] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.409668][ T6593] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.409764][ T6593] bridge_slave_1: entered allmulticast mode [ 65.412330][ T6593] bridge_slave_1: entered promiscuous mode [ 65.436611][ T6593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.438258][ T6593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.483091][ T6593] team0: Port device team_slave_0 added [ 65.484734][ T6593] team0: Port device team_slave_1 added [ 65.562670][ T6593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.564669][ T6593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.565222][ T6593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.566695][ T6593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.566727][ T6593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.566756][ T6593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.601823][ T6593] hsr_slave_0: entered promiscuous mode [ 65.602366][ T6593] hsr_slave_1: entered promiscuous mode [ 65.685407][ T6593] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.749175][ T6593] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.753240][ T6593] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.757034][ T6593] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.777208][ T6593] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.777326][ T6593] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.777658][ T6593] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.777718][ T6593] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.807860][ T6593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.813412][ T6593] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.827836][ T2251] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.838992][ T2251] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.839091][ T2251] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.993365][ T6593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.017219][ T6593] veth0_vlan: entered promiscuous mode [ 66.020130][ T6593] veth1_vlan: entered promiscuous mode [ 66.030570][ T6593] veth0_macvtap: entered promiscuous mode [ 66.033927][ T6593] veth1_macvtap: entered promiscuous mode [ 66.040071][ T6593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.042901][ T6593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.044420][ T6593] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.044485][ T6593] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.044524][ T6593] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.044553][ T6593] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.454217][ T194] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.535186][ T194] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.653552][ T194] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.724495][ T194] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.074972][ T6634] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.077192][ T6634] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.083677][ T6634] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.085589][ T6634] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.086004][ T6634] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 1970/01/01 00:01:07 executed programs: 0 [ 67.491231][ T6634] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.492752][ T6634] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.493328][ T6634] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.494254][ T6634] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.494700][ T6634] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.596718][ T6644] chnl_net:caif_netlink_parms(): no params data found [ 67.638497][ T6644] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.638607][ T6644] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.638717][ T6644] bridge_slave_0: entered allmulticast mode [ 67.639544][ T6644] bridge_slave_0: entered promiscuous mode [ 67.640927][ T6644] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.640995][ T6644] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.641097][ T6644] bridge_slave_1: entered allmulticast mode [ 67.642700][ T6644] bridge_slave_1: entered promiscuous mode [ 67.663205][ T6644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.666200][ T6644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.680289][ T6644] team0: Port device team_slave_0 added [ 67.684034][ T6644] team0: Port device team_slave_1 added [ 67.697366][ T6644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.697424][ T6644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.697469][ T6644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.698520][ T6644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.698546][ T6644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.698577][ T6644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.733168][ T6644] hsr_slave_0: entered promiscuous mode [ 67.733711][ T6644] hsr_slave_1: entered promiscuous mode [ 67.734041][ T6644] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.734149][ T6644] Cannot create hsr debugfs directory [ 69.057450][ T194] bridge_slave_1: left allmulticast mode [ 69.057551][ T194] bridge_slave_1: left promiscuous mode [ 69.058017][ T194] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.071406][ T194] bridge_slave_0: left allmulticast mode [ 69.073025][ T194] bridge_slave_0: left promiscuous mode [ 69.075396][ T194] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.571810][ T6634] Bluetooth: hci0: command tx timeout [ 69.894720][ T2315] cfg80211: failed to load regulatory.db [ 70.843793][ T194] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 70.883882][ T194] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 70.933372][ T194] bond0 (unregistering): Released all slaves [ 71.021917][ T194] hsr_slave_0: left promiscuous mode [ 71.023608][ T194] hsr_slave_1: left promiscuous mode [ 71.026269][ T194] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.028295][ T194] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.031026][ T194] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.032766][ T194] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.045435][ T194] veth1_macvtap: left promiscuous mode [ 71.045575][ T194] veth0_macvtap: left promiscuous mode [ 71.045671][ T194] veth1_vlan: left promiscuous mode [ 71.045760][ T194] veth0_vlan: left promiscuous mode [ 71.652141][ T6634] Bluetooth: hci0: command tx timeout [ 73.004659][ T194] team0 (unregistering): Port device team_slave_1 removed [ 73.152709][ T194] team0 (unregistering): Port device team_slave_0 removed [ 73.731367][ T6634] Bluetooth: hci0: command tx timeout [ 75.815658][ T6634] Bluetooth: hci0: command tx timeout [ 75.826234][ T6644] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.830232][ T6644] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.836367][ T6644] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.840820][ T6644] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.105007][ T6644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.118622][ T6644] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.135382][ T2251] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.135467][ T2251] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.140465][ T2251] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.140552][ T2251] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.456425][ T6644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.476008][ T6644] veth0_vlan: entered promiscuous mode [ 76.484047][ T6644] veth1_vlan: entered promiscuous mode [ 76.495978][ T6644] veth0_macvtap: entered promiscuous mode [ 76.498138][ T6644] veth1_macvtap: entered promiscuous mode [ 76.508187][ T6644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.515159][ T6644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.517792][ T6644] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.518252][ T6644] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.518283][ T6644] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.518312][ T6644] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.566673][ T230] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.566730][ T230] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.578292][ T2251] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.578349][ T2251] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 1970/01/01 00:01:16 executed programs: 2 [ 76.643699][ T6724] netlink: 'syz.0.17': attribute type 10 has an invalid length. [ 76.748125][ T6724] team0: Port device wlan1 added [ 76.760772][ T6725] netlink: 'syz.0.18': attribute type 10 has an invalid length. [ 76.804434][ T6726] netlink: 'syz.0.19': attribute type 10 has an invalid length. [ 76.816731][ T6727] netlink: 'syz.0.20': attribute type 10 has an invalid length. [ 76.834888][ T6728] netlink: 'syz.0.21': attribute type 10 has an invalid length. [ 76.867759][ T6729] netlink: 'syz.0.22': attribute type 10 has an invalid length. [ 76.880136][ T6730] netlink: 'syz.0.23': attribute type 10 has an invalid length. [ 76.892858][ T6731] netlink: 'syz.0.24': attribute type 10 has an invalid length. [ 76.916454][ T6732] netlink: 'syz.0.25': attribute type 10 has an invalid length. [ 76.934516][ T6733] netlink: 'syz.0.26': attribute type 10 has an invalid length. 1970/01/01 00:01:21 executed programs: 278 [ 81.686907][ T7008] validate_nla: 268 callbacks suppressed [ 81.687115][ T7008] netlink: 'syz.0.295': attribute type 10 has an invalid length. [ 81.697518][ T7009] netlink: 'syz.0.296': attribute type 10 has an invalid length. [ 81.707449][ T7010] netlink: 'syz.0.297': attribute type 10 has an invalid length. [ 81.736342][ T7011] netlink: 'syz.0.298': attribute type 10 has an invalid length. [ 81.746414][ T7012] netlink: 'syz.0.299': attribute type 10 has an invalid length. [ 81.756534][ T7013] netlink: 'syz.0.300': attribute type 10 has an invalid length. [ 81.796393][ T7014] netlink: 'syz.0.301': attribute type 10 has an invalid length. [ 81.806404][ T7015] netlink: 'syz.0.302': attribute type 10 has an invalid length. [ 81.817108][ T7016] netlink: 'syz.0.303': attribute type 10 has an invalid length. [ 81.855807][ T7018] netlink: 'syz.0.304': attribute type 10 has an invalid length. [ 86.695917][ T7300] validate_nla: 280 callbacks suppressed [ 86.696127][ T7300] netlink: 'syz.0.585': attribute type 10 has an invalid length. 1970/01/01 00:01:26 executed programs: 569 [ 86.726288][ T7301] netlink: 'syz.0.586': attribute type 10 has an invalid length. [ 86.735707][ T7302] netlink: 'syz.0.587': attribute type 10 has an invalid length. [ 86.745320][ T7303] netlink: 'syz.0.588': attribute type 10 has an invalid length. [ 86.776509][ T7304] netlink: 'syz.0.589': attribute type 10 has an invalid length. [ 86.785350][ T7305] netlink: 'syz.0.590': attribute type 10 has an invalid length. [ 86.794620][ T7306] netlink: 'syz.0.591': attribute type 10 has an invalid length. [ 86.826411][ T7307] netlink: 'syz.0.592': attribute type 10 has an invalid length. [ 86.836464][ T7308] netlink: 'syz.0.593': attribute type 10 has an invalid length. [ 86.845947][ T7309] netlink: 'syz.0.594': attribute type 10 has an invalid length. [ 87.280432][ T6096] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.283455][ T6096] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.284799][ T6096] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.285460][ T6096] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.286039][ T6096] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.374168][ T7333] chnl_net:caif_netlink_parms(): no params data found [ 87.466518][ T7333] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.466633][ T7333] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.466766][ T7333] bridge_slave_0: entered allmulticast mode [ 87.467583][ T7333] bridge_slave_0: entered promiscuous mode [ 87.469284][ T7333] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.469362][ T7333] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.469456][ T7333] bridge_slave_1: entered allmulticast mode [ 87.470276][ T7333] bridge_slave_1: entered promiscuous mode [ 87.487697][ T7333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.489262][ T7333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.505237][ T7333] team0: Port device team_slave_0 added [ 87.506894][ T7333] team0: Port device team_slave_1 added [ 87.520007][ T7333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.520053][ T7333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.520086][ T7333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.521167][ T7333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.521192][ T7333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.521221][ T7333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.556559][ T7333] hsr_slave_0: entered promiscuous mode [ 87.557021][ T7333] hsr_slave_1: entered promiscuous mode [ 87.873239][ T194] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.974991][ T194] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.052776][ T194] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.154660][ T194] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.356429][ T194] bridge_slave_1: left allmulticast mode [ 88.356501][ T194] bridge_slave_1: left promiscuous mode [ 88.356642][ T194] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.364304][ T194] bridge_slave_0: left allmulticast mode [ 88.364362][ T194] bridge_slave_0: left promiscuous mode [ 88.364500][ T194] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.331498][ T6096] Bluetooth: hci1: command tx timeout [ 89.883710][ T194] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.923769][ T194] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.993036][ T194] bond0 (unregistering): Released all slaves [ 90.142824][ T194] [ 90.143458][ T194] ====================================================== [ 90.145435][ T194] WARNING: possible circular locking dependency detected [ 90.147386][ T194] 6.16.0-rc7-syzkaller-g82af5ea7c611 #0 Not tainted [ 90.149272][ T194] ------------------------------------------------------ [ 90.151342][ T194] kworker/u8:4/194 is trying to acquire lock: [ 90.153120][ T194] ffff0000cb474e00 (team->team_lock_key#2){+.+.}-{4:4}, at: team_del_slave+0x30/0x180 [ 90.155977][ T194] [ 90.155977][ T194] but task is already holding lock: [ 90.157987][ T194] ffff0000d83e8768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x128/0x570 [ 90.160952][ T194] [ 90.160952][ T194] which lock already depends on the new lock. [ 90.160952][ T194] [ 90.163964][ T194] [ 90.163964][ T194] the existing dependency chain (in reverse order) is: [ 90.166497][ T194] [ 90.166497][ T194] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 90.168666][ T194] __mutex_lock_common+0x1d0/0x2190 [ 90.170203][ T194] mutex_lock_nested+0x2c/0x38 [ 90.171646][ T194] ieee80211_open+0xe4/0x1cc [ 90.173096][ T194] __dev_open+0x42c/0x830 [ 90.174566][ T194] netif_open+0xa8/0x220 [ 90.175993][ T194] dev_open+0x104/0x1fc [ 90.177287][ T194] team_add_slave+0x85c/0x20a4 [ 90.178896][ T194] do_set_master+0x410/0x594 [ 90.180349][ T194] do_setlink+0xadc/0x3658 [ 90.181672][ T194] rtnl_newlink+0x10f8/0x15dc [ 90.183108][ T194] rtnetlink_rcv_msg+0x664/0x97c [ 90.184617][ T194] netlink_rcv_skb+0x220/0x3fc [ 90.186084][ T194] rtnetlink_rcv+0x28/0x38 [ 90.187424][ T194] netlink_unicast+0x618/0x830 [ 90.188892][ T194] netlink_sendmsg+0x648/0x930 [ 90.190392][ T194] ____sys_sendmsg+0x490/0x7b8 [ 90.191872][ T194] ___sys_sendmsg+0x204/0x278 [ 90.193276][ T194] __arm64_sys_sendmsg+0x184/0x238 [ 90.194807][ T194] invoke_syscall+0x98/0x2b8 [ 90.196201][ T194] el0_svc_common+0x130/0x23c [ 90.197671][ T194] do_el0_svc+0x48/0x58 [ 90.198930][ T194] el0_svc+0x58/0x180 [ 90.200213][ T194] el0t_64_sync_handler+0x84/0x12c [ 90.201786][ T194] el0t_64_sync+0x198/0x19c [ 90.203156][ T194] [ 90.203156][ T194] -> #0 (team->team_lock_key#2){+.+.}-{4:4}: [ 90.205500][ T194] __lock_acquire+0x1774/0x30a4 [ 90.207016][ T194] lock_acquire+0x14c/0x2e0 [ 90.208377][ T194] __mutex_lock_common+0x1d0/0x2190 [ 90.209894][ T194] mutex_lock_nested+0x2c/0x38 [ 90.211401][ T194] team_del_slave+0x30/0x180 [ 90.212845][ T194] team_device_event+0x274/0x950 [ 90.214286][ T194] notifier_call_chain+0x1b8/0x4e4 [ 90.215854][ T194] raw_notifier_call_chain+0x3c/0x50 [ 90.217433][ T194] unregister_netdevice_many_notify+0x125c/0x1fac [ 90.219317][ T194] unregister_netdevice_queue+0x2b4/0x300 [ 90.221090][ T194] _cfg80211_unregister_wdev+0x154/0x52c [ 90.222758][ T194] cfg80211_unregister_wdev+0x24/0x34 [ 90.224371][ T194] ieee80211_remove_interfaces+0x3a0/0x570 [ 90.226219][ T194] ieee80211_unregister_hw+0x60/0x29c [ 90.227978][ T194] mac80211_hwsim_del_radio+0x214/0x3b4 [ 90.229643][ T194] hwsim_exit_net+0x49c/0x558 [ 90.231093][ T194] ops_undo_list+0x3c0/0x7ec [ 90.232485][ T194] cleanup_net+0x3e4/0x6c0 [ 90.233868][ T194] process_one_work+0x7e8/0x155c [ 90.235416][ T194] worker_thread+0x958/0xed8 [ 90.236826][ T194] kthread+0x5fc/0x75c [ 90.238062][ T194] ret_from_fork+0x10/0x20 [ 90.239464][ T194] [ 90.239464][ T194] other info that might help us debug this: [ 90.239464][ T194] [ 90.242418][ T194] Possible unsafe locking scenario: [ 90.242418][ T194] [ 90.244500][ T194] CPU0 CPU1 [ 90.246006][ T194] ---- ---- [ 90.247497][ T194] lock(&rdev->wiphy.mtx); [ 90.248809][ T194] lock(team->team_lock_key#2); [ 90.250870][ T194] lock(&rdev->wiphy.mtx); [ 90.252861][ T194] lock(team->team_lock_key#2); [ 90.254240][ T194] [ 90.254240][ T194] *** DEADLOCK *** [ 90.254240][ T194] [ 90.256551][ T194] 5 locks held by kworker/u8:4/194: [ 90.257962][ T194] #0: ffff0000c18a2148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x63c/0x155c [ 90.260860][ T194] #1: ffff80009bcb7bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x6d4/0x155c [ 90.263839][ T194] #2: ffff8000928bb010 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x6c0 [ 90.266434][ T194] #3: ffff8000928c7ba8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c [ 90.268861][ T194] #4: ffff0000d83e8768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x128/0x570 [ 90.271980][ T194] [ 90.271980][ T194] stack backtrace: [ 90.273582][ T194] CPU: 0 UID: 0 PID: 194 Comm: kworker/u8:4 Not tainted 6.16.0-rc7-syzkaller-g82af5ea7c611 #0 PREEMPT [ 90.276659][ T194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 90.279494][ T194] Workqueue: netns cleanup_net [ 90.280814][ T194] Call trace: [ 90.281655][ T194] show_stack+0x2c/0x3c (C) [ 90.282918][ T194] __dump_stack+0x30/0x40 [ 90.284162][ T194] dump_stack_lvl+0xd8/0x12c [ 90.285408][ T194] dump_stack+0x1c/0x28 [ 90.286554][ T194] print_circular_bug+0x324/0x32c [ 90.287927][ T194] check_noncircular+0x154/0x174 [ 90.289302][ T194] __lock_acquire+0x1774/0x30a4 [ 90.290579][ T194] lock_acquire+0x14c/0x2e0 [ 90.291890][ T194] __mutex_lock_common+0x1d0/0x2190 [ 90.293306][ T194] mutex_lock_nested+0x2c/0x38 [ 90.294638][ T194] team_del_slave+0x30/0x180 [ 90.295925][ T194] team_device_event+0x274/0x950 [ 90.297248][ T194] notifier_call_chain+0x1b8/0x4e4 [ 90.298590][ T194] raw_notifier_call_chain+0x3c/0x50 [ 90.300023][ T194] unregister_netdevice_many_notify+0x125c/0x1fac [ 90.301784][ T194] unregister_netdevice_queue+0x2b4/0x300 [ 90.303404][ T194] _cfg80211_unregister_wdev+0x154/0x52c [ 90.304920][ T194] cfg80211_unregister_wdev+0x24/0x34 [ 90.306376][ T194] ieee80211_remove_interfaces+0x3a0/0x570 [ 90.307962][ T194] ieee80211_unregister_hw+0x60/0x29c [ 90.309491][ T194] mac80211_hwsim_del_radio+0x214/0x3b4 [ 90.311083][ T194] hwsim_exit_net+0x49c/0x558 [ 90.312347][ T194] ops_undo_list+0x3c0/0x7ec [ 90.313578][ T194] cleanup_net+0x3e4/0x6c0 [ 90.314773][ T194] process_one_work+0x7e8/0x155c [ 90.316095][ T194] worker_thread+0x958/0xed8 [ 90.317384][ T194] kthread+0x5fc/0x75c [ 90.318467][ T194] ret_from_fork+0x10/0x20 [ 90.324526][ T194] team0: Port device wlan1 removed [ 90.576630][ T7333] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.580060][ T7333] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.586597][ T7333] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.589886][ T7333] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.657616][ T194] hsr_slave_0: left promiscuous mode [ 90.659248][ T194] hsr_slave_1: left promiscuous mode [ 90.659537][ T194] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.659569][ T194] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.665248][ T194] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.665300][ T194] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.670418][ T194] veth1_macvtap: left promiscuous mode [ 90.670496][ T194] veth0_macvtap: left promiscuous mode [ 90.670574][ T194] veth1_vlan: left promiscuous mode [ 90.670632][ T194] veth0_vlan: left promiscuous mode [ 91.421382][ T6096] Bluetooth: hci1: command tx timeout [ 92.472075][ T194] team0 (unregistering): Port device team_slave_1 removed [ 92.692672][ T194] team0 (unregistering): Port device team_slave_0 removed [ 93.491369][ T6096] Bluetooth: hci1: command tx timeout [ 95.035210][ T7333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.039419][ T7333] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.041948][ T230] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.041991][ T230] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.043767][ T230] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.043806][ T230] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.109017][ T7333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.127676][ T7333] veth0_vlan: entered promiscuous mode [ 95.130773][ T7333] veth1_vlan: entered promiscuous mode [ 95.140440][ T7333] veth0_macvtap: entered promiscuous mode [ 95.142276][ T7333] veth1_macvtap: entered promiscuous mode [ 95.146509][ T7333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.148058][ T7333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.149117][ T7333] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.149150][ T7333] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.149176][ T7333] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.149201][ T7333] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.174983][ T7333] ieee80211 phy7: Selected rate control algorithm 'minstrel_ht' [ 95.183718][ T2113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.183760][ T2113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.184758][ T7333] ieee80211 phy8: Selected rate control algorithm 'minstrel_ht' [ 95.190878][ T230] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.190924][ T230] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 1970/01/01 00:01:34 executed programs: 602 [ 95.272718][ T7410] validate_nla: 22 callbacks suppressed [ 95.272774][ T7410] netlink: 'syz.0.617': attribute type 10 has an invalid length. [ 95.374340][ T7410] team0: Port device wlan1 added [ 95.382828][ T7411] netlink: 'syz.0.618': attribute type 10 has an invalid length. [ 95.451088][ T7412] netlink: 'syz.0.619': attribute type 10 has an invalid length. [ 95.458250][ T7413] netlink: 'syz.0.620': attribute type 10 has an invalid length. [ 95.495571][ T7414] netlink: 'syz.0.621': attribute type 10 has an invalid length. [ 95.504892][ T7415] netlink: 'syz.0.622': attribute type 10 has an invalid length. [ 95.510844][ T7416] netlink: 'syz.0.623': attribute type 10 has an invalid length. [ 95.545669][ T7417] netlink: 'syz.0.624': attribute type 10 has an invalid length. [ 95.553082][ T7418] netlink: 'syz.0.625': attribute type 10 has an invalid length. [ 95.559528][ T7419] netlink: 'syz.0.626': attribute type 10 has an invalid length. [ 95.571417][ T6096] Bluetooth: hci1: command tx timeout