Warning: Permanently added '10.128.1.195' (ED25519) to the list of known hosts. 2025/07/29 03:35:03 ignoring optional flag "sandboxArg"="0" 2025/07/29 03:35:04 parsed 1 programs [ 77.591960][ T5851] cgroup: Unknown subsys name 'net' [ 77.681680][ T5851] cgroup: Unknown subsys name 'cpuset' [ 77.690252][ T5851] cgroup: Unknown subsys name 'rlimit' [ 79.104351][ T5851] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.705052][ T5865] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.713423][ T5865] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.721581][ T5865] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.730053][ T5865] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.737887][ T5865] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.916177][ T5864] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 82.873083][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.882044][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.919176][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.927209][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.883210][ T5901] chnl_net:caif_netlink_parms(): no params data found [ 83.975503][ T5901] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.983509][ T5901] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.990853][ T5901] bridge_slave_0: entered allmulticast mode [ 83.998200][ T5901] bridge_slave_0: entered promiscuous mode [ 84.007253][ T5901] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.016487][ T5901] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.024503][ T5901] bridge_slave_1: entered allmulticast mode [ 84.033001][ T5901] bridge_slave_1: entered promiscuous mode [ 84.067603][ T5901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.079636][ T5901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.111887][ T5901] team0: Port device team_slave_0 added [ 84.120404][ T5901] team0: Port device team_slave_1 added [ 84.146424][ T5901] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.153816][ T5901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.179747][ T5901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.192154][ T5901] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.199181][ T5901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.225084][ T5901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.266009][ T5901] hsr_slave_0: entered promiscuous mode [ 84.273116][ T5901] hsr_slave_1: entered promiscuous mode [ 84.403022][ T5901] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.414918][ T5901] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.425084][ T5901] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.435948][ T5901] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.465915][ T5901] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.473168][ T5901] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.481243][ T5901] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.488462][ T5901] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.544169][ T5901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.562760][ T1110] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.571944][ T1110] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.589220][ T5901] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.603374][ T1110] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.610530][ T1110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.624214][ T3567] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.631365][ T3567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.804420][ T5901] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.844491][ T5901] veth0_vlan: entered promiscuous mode [ 84.857046][ T5901] veth1_vlan: entered promiscuous mode [ 84.885313][ T5901] veth0_macvtap: entered promiscuous mode [ 84.896149][ T5901] veth1_macvtap: entered promiscuous mode [ 84.916887][ T5901] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.930050][ T5901] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.942215][ T5901] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.951848][ T5901] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.960678][ T5901] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.969445][ T5901] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.098309][ T3567] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.152810][ T3567] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.211989][ T3567] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.312780][ T3567] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2025/07/29 03:35:15 executed programs: 0 [ 86.585613][ T5865] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.594037][ T5865] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.602104][ T5865] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.610938][ T5865] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.620827][ T5865] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.774744][ T5958] chnl_net:caif_netlink_parms(): no params data found [ 86.819611][ T43] cfg80211: failed to load regulatory.db [ 86.854675][ T5958] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.861896][ T5958] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.869474][ T5958] bridge_slave_0: entered allmulticast mode [ 86.876415][ T5958] bridge_slave_0: entered promiscuous mode [ 86.885152][ T5958] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.893027][ T5958] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.902169][ T5958] bridge_slave_1: entered allmulticast mode [ 86.909538][ T5958] bridge_slave_1: entered promiscuous mode [ 86.943652][ T5958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.956382][ T5958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.999198][ T5958] team0: Port device team_slave_0 added [ 87.007369][ T5958] team0: Port device team_slave_1 added [ 87.035341][ T5958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.042983][ T5958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.069362][ T5958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.082360][ T5958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.089362][ T5958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.116262][ T5958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.156787][ T5958] hsr_slave_0: entered promiscuous mode [ 87.163250][ T5958] hsr_slave_1: entered promiscuous mode [ 87.170029][ T5958] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.178146][ T5958] Cannot create hsr debugfs directory [ 88.238955][ T3567] bridge_slave_1: left allmulticast mode [ 88.244722][ T3567] bridge_slave_1: left promiscuous mode [ 88.252365][ T3567] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.265218][ T3567] bridge_slave_0: left allmulticast mode [ 88.271735][ T3567] bridge_slave_0: left promiscuous mode [ 88.277428][ T3567] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.521009][ T3567] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 88.532077][ T3567] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 88.542041][ T3567] bond0 (unregistering): Released all slaves [ 88.659239][ T5169] Bluetooth: hci0: command tx timeout [ 88.713996][ T3567] hsr_slave_0: left promiscuous mode [ 88.720369][ T3567] hsr_slave_1: left promiscuous mode [ 88.726555][ T3567] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.737027][ T3567] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.745877][ T3567] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.757968][ T3567] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.781596][ T3567] veth1_macvtap: left promiscuous mode [ 88.789948][ T3567] veth0_macvtap: left promiscuous mode [ 88.795675][ T3567] veth1_vlan: left promiscuous mode [ 88.801553][ T3567] veth0_vlan: left promiscuous mode [ 89.236710][ T3567] team0 (unregistering): Port device team_slave_1 removed [ 89.270348][ T3567] team0 (unregistering): Port device team_slave_0 removed [ 89.800525][ T5958] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.814664][ T5958] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.838969][ T5958] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.854580][ T5958] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.235131][ T5958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.286338][ T5958] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.299977][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.307147][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.386312][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.393448][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.621930][ T5958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.663907][ T5958] veth0_vlan: entered promiscuous mode [ 90.675614][ T5958] veth1_vlan: entered promiscuous mode [ 90.701960][ T5958] veth0_macvtap: entered promiscuous mode [ 90.711806][ T5958] veth1_macvtap: entered promiscuous mode [ 90.728701][ T5958] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.738541][ T5169] Bluetooth: hci0: command tx timeout [ 90.750785][ T5958] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.763382][ T5958] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.772879][ T5958] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.781974][ T5958] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.790768][ T5958] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.845659][ T3567] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.856086][ T3567] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.884801][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.893142][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.932559][ T6005] netlink: 'syz.0.16': attribute type 10 has an invalid length. [ 90.951693][ T6005] team0: Port device wlan1 added [ 90.969298][ T6006] netlink: 'syz.0.17': attribute type 10 has an invalid length. [ 91.021581][ T6007] netlink: 'syz.0.18': attribute type 10 has an invalid length. [ 91.053465][ T6008] netlink: 'syz.0.19': attribute type 10 has an invalid length. [ 91.087336][ T6009] netlink: 'syz.0.20': attribute type 10 has an invalid length. [ 91.133406][ T6010] netlink: 'syz.0.21': attribute type 10 has an invalid length. [ 91.158731][ T6011] netlink: 'syz.0.22': attribute type 10 has an invalid length. [ 91.185216][ T6012] netlink: 'syz.0.23': attribute type 10 has an invalid length. [ 91.232149][ T6013] netlink: 'syz.0.24': attribute type 10 has an invalid length. [ 91.255908][ T6014] netlink: 'syz.0.25': attribute type 10 has an invalid length. 2025/07/29 03:35:20 executed programs: 29 [ 92.817880][ T5169] Bluetooth: hci0: command tx timeout [ 94.898799][ T5169] Bluetooth: hci0: command tx timeout [ 95.944105][ T6276] validate_nla: 261 callbacks suppressed [ 95.944119][ T6276] netlink: 'syz.0.287': attribute type 10 has an invalid length. [ 95.970352][ T6277] netlink: 'syz.0.288': attribute type 10 has an invalid length. [ 95.989091][ T6278] netlink: 'syz.0.289': attribute type 10 has an invalid length. [ 96.013914][ T6279] netlink: 'syz.0.290': attribute type 10 has an invalid length. [ 96.037638][ T6280] netlink: 'syz.0.291': attribute type 10 has an invalid length. [ 96.057639][ T6281] netlink: 'syz.0.292': attribute type 10 has an invalid length. [ 96.078151][ T6282] netlink: 'syz.0.293': attribute type 10 has an invalid length. [ 96.099029][ T6283] netlink: 'syz.0.294': attribute type 10 has an invalid length. [ 96.123434][ T6284] netlink: 'syz.0.295': attribute type 10 has an invalid length. [ 96.142057][ T6285] netlink: 'syz.0.296': attribute type 10 has an invalid length. 2025/07/29 03:35:25 executed programs: 306 [ 100.955078][ T6557] validate_nla: 269 callbacks suppressed [ 100.955090][ T6557] netlink: 'syz.0.566': attribute type 10 has an invalid length. [ 100.980676][ T6558] netlink: 'syz.0.567': attribute type 10 has an invalid length. [ 100.999810][ T6559] netlink: 'syz.0.568': attribute type 10 has an invalid length. [ 101.020443][ T6560] netlink: 'syz.0.569': attribute type 10 has an invalid length. [ 101.044099][ T6561] netlink: 'syz.0.570': attribute type 10 has an invalid length. [ 101.063337][ T6562] netlink: 'syz.0.571': attribute type 10 has an invalid length. [ 101.084027][ T6563] netlink: 'syz.0.572': attribute type 10 has an invalid length. [ 101.103682][ T6564] netlink: 'syz.0.573': attribute type 10 has an invalid length. [ 101.123547][ T6565] netlink: 'syz.0.574': attribute type 10 has an invalid length. [ 101.142750][ T6566] netlink: 'syz.0.575': attribute type 10 has an invalid length. 2025/07/29 03:35:30 executed programs: 586 [ 101.906097][ T5865] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 101.914513][ T5865] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 101.922938][ T5865] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 101.933164][ T5865] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 101.942258][ T5865] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 102.087259][ T6608] chnl_net:caif_netlink_parms(): no params data found [ 102.126499][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.185369][ T6608] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.192940][ T6608] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.200677][ T6608] bridge_slave_0: entered allmulticast mode [ 102.207625][ T6608] bridge_slave_0: entered promiscuous mode [ 102.216470][ T6608] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.223942][ T6608] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.232279][ T6608] bridge_slave_1: entered allmulticast mode [ 102.239644][ T6608] bridge_slave_1: entered promiscuous mode [ 102.269437][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.296073][ T6608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.308664][ T6608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.340718][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.368724][ T6608] team0: Port device team_slave_0 added [ 102.377636][ T6608] team0: Port device team_slave_1 added [ 102.416424][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.430610][ T6608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.437570][ T6608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.463984][ T6608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.478470][ T6608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.485588][ T6608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.512171][ T6608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.582073][ T6608] hsr_slave_0: entered promiscuous mode [ 102.588711][ T6608] hsr_slave_1: entered promiscuous mode [ 102.702568][ T49] bridge_slave_1: left allmulticast mode [ 102.709101][ T49] bridge_slave_1: left promiscuous mode [ 102.715318][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.725119][ T49] bridge_slave_0: left allmulticast mode [ 102.731091][ T49] bridge_slave_0: left promiscuous mode [ 102.736760][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.998039][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.009439][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.019139][ T49] bond0 (unregistering): Released all slaves [ 103.137229][ T49] [ 103.139607][ T49] ====================================================== [ 103.146637][ T49] WARNING: possible circular locking dependency detected [ 103.153671][ T49] 6.16.0-syzkaller #0 Not tainted [ 103.158698][ T49] ------------------------------------------------------ [ 103.165726][ T49] kworker/u8:3/49 is trying to acquire lock: [ 103.171716][ T49] ffff88807a710e00 (team->team_lock_key#2){+.+.}-{4:4}, at: team_del_slave+0x32/0x1c0 [ 103.181338][ T49] [ 103.181338][ T49] but task is already holding lock: [ 103.188709][ T49] ffff8880784d8768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0 [ 103.199094][ T49] [ 103.199094][ T49] which lock already depends on the new lock. [ 103.199094][ T49] [ 103.209553][ T49] [ 103.209553][ T49] the existing dependency chain (in reverse order) is: [ 103.218578][ T49] [ 103.218578][ T49] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 103.226336][ T49] lock_acquire+0x120/0x360 [ 103.231386][ T49] __mutex_lock+0x182/0xe80 [ 103.236468][ T49] ieee80211_open+0xed/0x1f0 [ 103.241612][ T49] __dev_open+0x470/0x880 [ 103.246486][ T49] netif_open+0xaa/0x170 [ 103.251281][ T49] dev_open+0x125/0x260 [ 103.255980][ T49] team_add_slave+0xb36/0x2840 [ 103.261288][ T49] do_set_master+0x530/0x6d0 [ 103.266515][ T49] do_setlink+0xcf0/0x41c0 [ 103.271474][ T49] rtnl_newlink+0x160b/0x1c70 [ 103.276703][ T49] rtnetlink_rcv_msg+0x7cc/0xb70 [ 103.282186][ T49] netlink_rcv_skb+0x205/0x470 [ 103.287524][ T49] netlink_unicast+0x75c/0x8e0 [ 103.292835][ T49] netlink_sendmsg+0x805/0xb30 [ 103.298146][ T49] __sock_sendmsg+0x21c/0x270 [ 103.303365][ T49] ____sys_sendmsg+0x505/0x830 [ 103.308670][ T49] ___sys_sendmsg+0x21f/0x2a0 [ 103.313890][ T49] __x64_sys_sendmsg+0x19b/0x260 [ 103.319366][ T49] do_syscall_64+0xfa/0x3b0 [ 103.324412][ T49] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.330846][ T49] [ 103.330846][ T49] -> #0 (team->team_lock_key#2){+.+.}-{4:4}: [ 103.339053][ T49] validate_chain+0xb9b/0x2140 [ 103.344359][ T49] __lock_acquire+0xab9/0xd20 [ 103.349575][ T49] lock_acquire+0x120/0x360 [ 103.354613][ T49] __mutex_lock+0x182/0xe80 [ 103.359654][ T49] team_del_slave+0x32/0x1c0 [ 103.364801][ T49] team_device_event+0x285/0xa20 [ 103.370280][ T49] notifier_call_chain+0x1b6/0x3e0 [ 103.375934][ T49] unregister_netdevice_many_notify+0x15d8/0x2320 [ 103.382893][ T49] unregister_netdevice_queue+0x33c/0x380 [ 103.389152][ T49] _cfg80211_unregister_wdev+0x165/0x590 [ 103.395331][ T49] ieee80211_remove_interfaces+0x49a/0x6d0 [ 103.401701][ T49] ieee80211_unregister_hw+0x5d/0x2c0 [ 103.407613][ T49] mac80211_hwsim_del_radio+0x275/0x460 [ 103.413703][ T49] hwsim_exit_net+0x584/0x640 [ 103.418910][ T49] ops_undo_list+0x497/0x990 [ 103.424005][ T49] cleanup_net+0x4c5/0x800 [ 103.428926][ T49] process_scheduled_works+0xae1/0x17b0 [ 103.434978][ T49] worker_thread+0x8a0/0xda0 [ 103.440075][ T49] kthread+0x711/0x8a0 [ 103.444739][ T49] ret_from_fork+0x3fc/0x770 [ 103.449828][ T49] ret_from_fork_asm+0x1a/0x30 [ 103.455094][ T49] [ 103.455094][ T49] other info that might help us debug this: [ 103.455094][ T49] [ 103.465315][ T49] Possible unsafe locking scenario: [ 103.465315][ T49] [ 103.472741][ T49] CPU0 CPU1 [ 103.478085][ T49] ---- ---- [ 103.483450][ T49] lock(&rdev->wiphy.mtx); [ 103.487942][ T49] lock(team->team_lock_key#2); [ 103.495420][ T49] lock(&rdev->wiphy.mtx); [ 103.502453][ T49] lock(team->team_lock_key#2); [ 103.507378][ T49] [ 103.507378][ T49] *** DEADLOCK *** [ 103.507378][ T49] [ 103.515504][ T49] 5 locks held by kworker/u8:3/49: [ 103.520678][ T49] #0: ffff88801b2fe148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 103.531533][ T49] #1: ffffc90000b97bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 103.542058][ T49] #2: ffffffff8f50f5d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 103.551347][ T49] #3: ffffffff8f51c1c8 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_unregister_hw+0x55/0x2c0 [ 103.561150][ T49] #4: ffff8880784d8768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0 [ 103.571908][ T49] [ 103.571908][ T49] stack backtrace: [ 103.577794][ T49] CPU: 1 UID: 0 PID: 49 Comm: kworker/u8:3 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 103.577806][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 103.577813][ T49] Workqueue: netns cleanup_net [ 103.577833][ T49] Call Trace: [ 103.577838][ T49] [ 103.577843][ T49] dump_stack_lvl+0x189/0x250 [ 103.577856][ T49] ? __pfx_dump_stack_lvl+0x10/0x10 [ 103.577866][ T49] ? __pfx__printk+0x10/0x10 [ 103.577877][ T49] ? print_lock_name+0xde/0x100 [ 103.577888][ T49] print_circular_bug+0x2ee/0x310 [ 103.577901][ T49] check_noncircular+0x134/0x160 [ 103.577912][ T49] validate_chain+0xb9b/0x2140 [ 103.577924][ T49] ? lockdep_hardirqs_on+0x9c/0x150 [ 103.577936][ T49] __lock_acquire+0xab9/0xd20 [ 103.577945][ T49] ? team_del_slave+0x32/0x1c0 [ 103.577957][ T49] lock_acquire+0x120/0x360 [ 103.577966][ T49] ? team_del_slave+0x32/0x1c0 [ 103.577977][ T49] ? __mutex_trylock_common+0x153/0x260 [ 103.577989][ T49] __mutex_lock+0x182/0xe80 [ 103.577999][ T49] ? team_del_slave+0x32/0x1c0 [ 103.578010][ T49] ? rcu_is_watching+0x15/0xb0 [ 103.578021][ T49] ? team_del_slave+0x32/0x1c0 [ 103.578032][ T49] ? __pfx___mutex_lock+0x10/0x10 [ 103.578042][ T49] ? bond_netdev_event+0xd9/0xe80 [ 103.578055][ T49] ? __pfx___mutex_lock+0x10/0x10 [ 103.578063][ T49] ? __pfx_bond_netdev_event+0x10/0x10 [ 103.578077][ T49] team_del_slave+0x32/0x1c0 [ 103.578088][ T49] team_device_event+0x285/0xa20 [ 103.578098][ T49] notifier_call_chain+0x1b6/0x3e0 [ 103.578111][ T49] unregister_netdevice_many_notify+0x15d8/0x2320 [ 103.578124][ T49] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 103.578135][ T49] ? __lock_acquire+0xab9/0xd20 [ 103.578148][ T49] unregister_netdevice_queue+0x33c/0x380 [ 103.578158][ T49] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 103.578169][ T49] _cfg80211_unregister_wdev+0x165/0x590 [ 103.578182][ T49] ieee80211_remove_interfaces+0x49a/0x6d0 [ 103.578193][ T49] ? __pfx_synchronize_rcu+0x10/0x10 [ 103.578204][ T49] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 103.578214][ T49] ? rcu_is_watching+0x15/0xb0 [ 103.578224][ T49] ieee80211_unregister_hw+0x5d/0x2c0 [ 103.578234][ T49] mac80211_hwsim_del_radio+0x275/0x460 [ 103.578248][ T49] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 103.578262][ T49] hwsim_exit_net+0x584/0x640 [ 103.578274][ T49] ? __pfx_hwsim_exit_net+0x10/0x10 [ 103.578285][ T49] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 103.578298][ T49] ops_undo_list+0x497/0x990 [ 103.578311][ T49] ? __pfx_ops_undo_list+0x10/0x10 [ 103.578324][ T49] cleanup_net+0x4c5/0x800 [ 103.578335][ T49] ? __pfx_cleanup_net+0x10/0x10 [ 103.578346][ T49] ? _raw_spin_unlock_irq+0x23/0x50 [ 103.578355][ T49] ? process_scheduled_works+0x9ef/0x17b0 [ 103.578364][ T49] ? process_scheduled_works+0x9ef/0x17b0 [ 103.578374][ T49] process_scheduled_works+0xae1/0x17b0 [ 103.578388][ T49] ? __pfx_process_scheduled_works+0x10/0x10 [ 103.578401][ T49] worker_thread+0x8a0/0xda0 [ 103.578413][ T49] ? __kthread_parkme+0x7b/0x200 [ 103.578425][ T49] kthread+0x711/0x8a0 [ 103.578436][ T49] ? __pfx_worker_thread+0x10/0x10 [ 103.578445][ T49] ? __pfx_kthread+0x10/0x10 [ 103.578455][ T49] ? _raw_spin_unlock_irq+0x23/0x50 [ 103.578463][ T49] ? lockdep_hardirqs_on+0x9c/0x150 [ 103.578471][ T49] ? __pfx_kthread+0x10/0x10 [ 103.578482][ T49] ret_from_fork+0x3fc/0x770 [ 103.578492][ T49] ? __pfx_ret_from_fork+0x10/0x10 [ 103.578501][ T49] ? __switch_to_asm+0x39/0x70 [ 103.578511][ T49] ? __switch_to_asm+0x33/0x70 [ 103.578520][ T49] ? __pfx_kthread+0x10/0x10 [ 103.578531][ T49] ret_from_fork_asm+0x1a/0x30 [ 103.578545][ T49] [ 103.939370][ T49] team0: Port device wlan1 removed [ 104.027919][ T5865] Bluetooth: hci1: command tx timeout [ 104.086966][ T49] hsr_slave_0: left promiscuous mode [ 104.097122][ T49] hsr_slave_1: left promiscuous mode [ 104.106656][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.114172][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.122348][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.129826][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.143386][ T49] veth1_macvtap: left promiscuous mode [ 104.149007][ T49] veth0_macvtap: left promiscuous mode [ 104.154592][ T49] veth1_vlan: left promiscuous mode [ 104.160064][ T49] veth0_vlan: left promiscuous mode [ 104.323289][ T49] team0 (unregistering): Port device team_slave_1 removed [ 104.335938][ T49] team0 (unregistering): Port device team_slave_0 removed [ 104.521667][ T6608] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 104.531180][ T6608] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 104.543460][ T6608] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 104.553652][ T6608] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 104.648644][ T6608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.675562][ T6608] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.687330][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.694518][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.715749][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.722923][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.866964][ T6608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.908501][ T6608] veth0_vlan: entered promiscuous mode [ 104.920205][ T6608] veth1_vlan: entered promiscuous mode [ 104.947485][ T6608] veth0_macvtap: entered promiscuous mode [ 104.960635][ T6608] veth1_macvtap: entered promiscuous mode [ 104.977648][ T6608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.995774][ T6608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.007211][ T6608] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.016998][ T6608] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.027149][ T6608] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.036453][ T6608] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.070744][ T6608] ieee80211 phy7: Selected rate control algorithm 'minstrel_ht' [ 105.097686][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.106967][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.119980][ T6608] ieee80211 phy8: Selected rate control algorithm 'minstrel_ht' [ 105.145598][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.154238][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.203057][ T6688] team0: Port device wlan1 added [ 105.972819][ T6742] validate_nla: 85 callbacks suppressed [ 105.972836][ T6742] netlink: 'syz.0.661': attribute type 10 has an invalid length. [ 106.012045][ T6743] netlink: 'syz.0.662': attribute type 10 has an invalid length. [ 106.029780][ T6744] netlink: 'syz.0.663': attribute type 10 has an invalid length. [ 106.045078][ T6745] netlink: 'syz.0.664': attribute type 10 has an invalid length. [ 106.060677][ T6746] netlink: 'syz.0.665': attribute type 10 has an invalid length. [ 106.092144][ T6747] netlink: 'syz.0.666': attribute type 10 has an invalid length. [ 106.100297][ T5865] Bluetooth: hci1: command tx timeout [ 106.113675][ T6748] netlink: 'syz.0.667': attribute type 10 has an invalid length. [ 106.128503][ T6749] netlink: 'syz.0.668': attribute type 10 has an invalid length. [ 106.151547][ T6750] netlink: 'syz.0.669': attribute type 10 has an invalid length. [ 106.166535][ T6751] netlink: 'syz.0.670': attribute type 10 has an invalid length. 2025/07/29 03:35:35 executed programs: 683 [ 108.187898][ T5865] Bluetooth: hci1: command tx timeout [ 110.258286][ T5865] Bluetooth: hci1: command tx timeout [ 110.992924][ T7040] validate_nla: 286 callbacks suppressed [ 110.992940][ T7040] netlink: 'syz.0.957': attribute type 10 has an invalid length. [ 111.014036][ T7041] netlink: 'syz.0.958': attribute type 10 has an invalid length. [ 111.028975][ T7042] netlink: 'syz.0.959': attribute type 10 has an invalid length. [ 111.064369][ T7044] netlink: 'syz.0.960': attribute type 10 has an invalid length. [ 111.078854][ T7045] netlink: 'syz.0.961': attribute type 10 has an invalid length. [ 111.093076][ T7046] netlink: 'syz.0.962': attribute type 10 has an invalid length. [ 111.122015][ T7047] netlink: 'syz.0.963': attribute type 10 has an invalid length. [ 111.136245][ T7048] netlink: 'syz.0.964': attribute type 10 has an invalid length. [ 111.151896][ T7049] netlink: 'syz.0.965': attribute type 10 has an invalid length. [ 111.182622][ T7050] netlink: 'syz.0.966': attribute type 10 has an invalid length. 2025/07/29 03:35:40 executed programs: 980