Warning: Permanently added '10.128.1.222' (ED25519) to the list of known hosts. 2025/07/28 11:30:26 ignoring optional flag "sandboxArg"="0" 2025/07/28 11:30:27 parsed 1 programs [ 89.631666][ T5797] cgroup: Unknown subsys name 'net' [ 89.771923][ T5797] cgroup: Unknown subsys name 'rlimit' [ 91.551072][ T5797] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.146072][ T27] cfg80211: failed to load regulatory.db [ 93.909059][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 93.995038][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.003219][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.011939][ T5819] bridge_slave_0: entered allmulticast mode [ 94.021620][ T5819] bridge_slave_0: entered promiscuous mode [ 94.032146][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.040486][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.049771][ T5819] bridge_slave_1: entered allmulticast mode [ 94.057737][ T5819] bridge_slave_1: entered promiscuous mode [ 94.098527][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.115462][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.155360][ T5819] team0: Port device team_slave_0 added [ 94.163737][ T5819] team0: Port device team_slave_1 added [ 94.201516][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.208533][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.239359][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.252593][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.260584][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.288177][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.336469][ T5819] hsr_slave_0: entered promiscuous mode [ 94.343429][ T5819] hsr_slave_1: entered promiscuous mode [ 94.528777][ T5819] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.544367][ T5819] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.555954][ T5819] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.569227][ T5819] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.625434][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.634822][ T5819] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.644160][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.652844][ T5819] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.726728][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.753293][ T208] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.764190][ T208] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.783615][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.803426][ T215] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.811773][ T215] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.828920][ T208] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.836433][ T208] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.081722][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.138091][ T5819] veth0_vlan: entered promiscuous mode [ 95.157300][ T5819] veth1_vlan: entered promiscuous mode [ 95.190367][ T5819] veth0_macvtap: entered promiscuous mode [ 95.202973][ T5819] veth1_macvtap: entered promiscuous mode [ 95.222463][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.239166][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.252821][ T5819] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.262198][ T5819] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.271000][ T5819] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.280805][ T5819] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.444171][ T208] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.475609][ T5863] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.484820][ T5863] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.493357][ T5863] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.503672][ T5863] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.512679][ T5863] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 96.522101][ T5863] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.943249][ T208] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.406759][ T215] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.414973][ T215] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.446539][ T3500] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.454627][ T3500] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/07/28 11:30:39 executed programs: 0 [ 99.051603][ T5863] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 99.059802][ T5863] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 99.068451][ T5863] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 99.079681][ T5863] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 99.088661][ T5863] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 99.096803][ T5863] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 99.277193][ T5899] chnl_net:caif_netlink_parms(): no params data found [ 99.349269][ T5899] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.357504][ T5899] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.366076][ T5899] bridge_slave_0: entered allmulticast mode [ 99.373470][ T5899] bridge_slave_0: entered promiscuous mode [ 99.382182][ T5899] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.389477][ T5899] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.397516][ T5899] bridge_slave_1: entered allmulticast mode [ 99.404858][ T5899] bridge_slave_1: entered promiscuous mode [ 99.437993][ T5899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.451049][ T5899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.487401][ T5899] team0: Port device team_slave_0 added [ 99.496451][ T5899] team0: Port device team_slave_1 added [ 99.527888][ T5899] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.536225][ T5899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.566919][ T5899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.580423][ T5899] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.588276][ T5899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.616039][ T5899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.666541][ T5899] hsr_slave_0: entered promiscuous mode [ 99.673983][ T5899] hsr_slave_1: entered promiscuous mode [ 99.680346][ T5899] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.688966][ T5899] Cannot create hsr debugfs directory [ 100.042468][ T208] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.109044][ T208] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.046509][ T208] hsr_slave_0: left promiscuous mode [ 101.056134][ T208] hsr_slave_1: left promiscuous mode [ 101.064633][ T208] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.075637][ T208] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.085750][ T208] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.096683][ T208] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.107029][ T208] bridge_slave_1: left allmulticast mode [ 101.116168][ T208] bridge_slave_1: left promiscuous mode [ 101.123725][ T208] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.139539][ T208] bridge_slave_0: left allmulticast mode [ 101.147053][ T208] bridge_slave_0: left promiscuous mode [ 101.156073][ T208] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.182270][ T5106] Bluetooth: hci0: command tx timeout [ 101.196825][ T208] veth1_macvtap: left promiscuous mode [ 101.203143][ T208] veth0_macvtap: left promiscuous mode [ 101.209687][ T208] veth1_vlan: left promiscuous mode [ 101.218411][ T208] veth0_vlan: left promiscuous mode [ 101.666486][ T208] team0 (unregistering): Port device team_slave_1 removed [ 101.711709][ T208] team0 (unregistering): Port device team_slave_0 removed [ 101.745567][ T208] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.788539][ T208] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.116054][ T208] bond0 (unregistering): Released all slaves [ 102.224088][ T5899] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 102.239525][ T5899] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 102.258146][ T5899] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 102.272153][ T5899] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 102.409685][ T5899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.463987][ T5899] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.482721][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.490473][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.523421][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.530822][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.925357][ T5899] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.019579][ T5899] veth0_vlan: entered promiscuous mode [ 103.045424][ T5899] veth1_vlan: entered promiscuous mode [ 103.097410][ T5899] veth0_macvtap: entered promiscuous mode [ 103.108515][ T5899] veth1_macvtap: entered promiscuous mode [ 103.129425][ T5899] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.145537][ T5899] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.159097][ T5899] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.168451][ T5899] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.178989][ T5899] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.188261][ T5899] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.254141][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.263589][ T5106] Bluetooth: hci0: command tx timeout [ 103.275677][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.302957][ T3500] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.310963][ T3500] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.424396][ T5944] netlink: 'syz.0.16': attribute type 10 has an invalid length. [ 103.458182][ T5944] team0: Port device wlan1 added [ 103.535515][ T5945] netlink: 'syz.0.17': attribute type 10 has an invalid length. [ 103.635787][ T5946] netlink: 'syz.0.18': attribute type 10 has an invalid length. [ 103.720205][ T5947] netlink: 'syz.0.19': attribute type 10 has an invalid length. [ 103.752997][ T5948] netlink: 'syz.0.20': attribute type 10 has an invalid length. [ 103.847597][ T5949] netlink: 'syz.0.21': attribute type 10 has an invalid length. [ 103.891537][ T5950] netlink: 'syz.0.22': attribute type 10 has an invalid length. 2025/07/28 11:30:44 executed programs: 10 [ 103.973753][ T5951] netlink: 'syz.0.23': attribute type 10 has an invalid length. [ 104.059621][ T5952] netlink: 'syz.0.24': attribute type 10 has an invalid length. [ 104.135063][ T5953] netlink: 'syz.0.25': attribute type 10 has an invalid length. [ 105.341800][ T5106] Bluetooth: hci0: command tx timeout [ 107.421775][ T5106] Bluetooth: hci0: command tx timeout [ 108.454042][ T6116] validate_nla: 161 callbacks suppressed [ 108.454060][ T6116] netlink: 'syz.0.187': attribute type 10 has an invalid length. [ 108.494843][ T6117] netlink: 'syz.0.188': attribute type 10 has an invalid length. [ 108.526358][ T6118] netlink: 'syz.0.189': attribute type 10 has an invalid length. [ 108.567682][ T6119] netlink: 'syz.0.190': attribute type 10 has an invalid length. [ 108.597782][ T6120] netlink: 'syz.0.191': attribute type 10 has an invalid length. [ 108.637283][ T6121] netlink: 'syz.0.192': attribute type 10 has an invalid length. [ 108.668676][ T6122] netlink: 'syz.0.193': attribute type 10 has an invalid length. [ 108.698535][ T6123] netlink: 'syz.0.194': attribute type 10 has an invalid length. [ 108.733281][ T6124] netlink: 'syz.0.195': attribute type 10 has an invalid length. [ 108.771921][ T6125] netlink: 'syz.0.196': attribute type 10 has an invalid length. 2025/07/28 11:30:49 executed programs: 192 [ 113.468969][ T6328] validate_nla: 202 callbacks suppressed [ 113.468982][ T6328] netlink: 'syz.0.399': attribute type 10 has an invalid length. [ 113.498542][ T6329] netlink: 'syz.0.400': attribute type 10 has an invalid length. [ 113.523108][ T6330] netlink: 'syz.0.401': attribute type 10 has an invalid length. [ 113.546116][ T6331] netlink: 'syz.0.402': attribute type 10 has an invalid length. [ 113.569545][ T6332] netlink: 'syz.0.403': attribute type 10 has an invalid length. [ 113.592393][ T6333] netlink: 'syz.0.404': attribute type 10 has an invalid length. [ 113.616076][ T6334] netlink: 'syz.0.405': attribute type 10 has an invalid length. [ 113.639414][ T6335] netlink: 'syz.0.406': attribute type 10 has an invalid length. [ 113.664476][ T6336] netlink: 'syz.0.407': attribute type 10 has an invalid length. [ 113.690961][ T6337] netlink: 'syz.0.408': attribute type 10 has an invalid length. 2025/07/28 11:30:55 executed programs: 412 [ 117.951006][ T5863] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 117.961398][ T5863] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 117.970261][ T5863] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 117.981621][ T5863] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 117.996549][ T5863] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 118.005636][ T5863] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 118.173367][ T6547] chnl_net:caif_netlink_parms(): no params data found [ 118.218023][ T3500] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.302255][ T3500] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.317244][ T6547] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.324765][ T6547] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.334267][ T6547] bridge_slave_0: entered allmulticast mode [ 118.341409][ T6547] bridge_slave_0: entered promiscuous mode [ 118.349785][ T6547] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.357081][ T6547] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.364511][ T6547] bridge_slave_1: entered allmulticast mode [ 118.371935][ T6547] bridge_slave_1: entered promiscuous mode [ 118.390712][ T3500] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.431534][ T6547] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.446809][ T6547] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.469139][ T3500] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.510197][ T6547] team0: Port device team_slave_0 added [ 118.519226][ T6547] team0: Port device team_slave_1 added [ 118.558195][ T6547] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.565819][ T6547] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.595334][ T6547] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.609150][ T6547] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.616767][ T6547] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.643558][ T6547] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.693864][ T6547] hsr_slave_0: entered promiscuous mode [ 118.701430][ T6547] hsr_slave_1: entered promiscuous mode [ 119.529737][ T6547] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 119.541695][ T6547] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 119.556560][ T6547] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 119.588979][ T6547] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 119.638070][ T3500] [ 119.640467][ T3500] ====================================================== [ 119.647509][ T3500] WARNING: possible circular locking dependency detected [ 119.654681][ T3500] 6.6.100-syzkaller #0 Not tainted [ 119.659833][ T3500] ------------------------------------------------------ [ 119.666934][ T3500] kworker/u4:11/3500 is trying to acquire lock: [ 119.673307][ T3500] ffff888024720d00 (team->team_lock_key#2){+.+.}-{3:3}, at: team_del_slave+0x32/0x1c0 [ 119.683841][ T3500] [ 119.683841][ T3500] but task is already holding lock: [ 119.691417][ T3500] ffff8880781c0768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x292/0x680 [ 119.702099][ T3500] [ 119.702099][ T3500] which lock already depends on the new lock. [ 119.702099][ T3500] [ 119.712926][ T3500] [ 119.712926][ T3500] the existing dependency chain (in reverse order) is: [ 119.721970][ T3500] [ 119.721970][ T3500] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 119.729771][ T3500] __mutex_lock+0x129/0xcc0 [ 119.735363][ T3500] ieee80211_open+0x144/0x200 [ 119.741044][ T3500] __dev_open+0x2bc/0x430 [ 119.746032][ T3500] dev_open+0xab/0x170 [ 119.751035][ T3500] team_add_slave+0xae7/0x2660 [ 119.757343][ T3500] do_setlink+0xe14/0x3fb0 [ 119.762787][ T3500] rtnl_newlink+0x175b/0x2020 [ 119.768649][ T3500] rtnetlink_rcv_msg+0x7c7/0xf10 [ 119.774600][ T3500] netlink_rcv_skb+0x216/0x480 [ 119.780493][ T3500] netlink_unicast+0x751/0x8d0 [ 119.786186][ T3500] netlink_sendmsg+0x8c1/0xbe0 [ 119.791647][ T3500] ____sys_sendmsg+0x5bf/0x950 [ 119.797155][ T3500] ___sys_sendmsg+0x220/0x290 [ 119.802753][ T3500] __se_sys_sendmsg+0x1a5/0x270 [ 119.808170][ T3500] do_syscall_64+0x55/0xb0 [ 119.813157][ T3500] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 119.819711][ T3500] [ 119.819711][ T3500] -> #0 (team->team_lock_key#2){+.+.}-{3:3}: [ 119.827943][ T3500] __lock_acquire+0x2ddb/0x7c80 [ 119.833538][ T3500] lock_acquire+0x197/0x410 [ 119.838610][ T3500] __mutex_lock+0x129/0xcc0 [ 119.843690][ T3500] team_del_slave+0x32/0x1c0 [ 119.849214][ T3500] team_device_event+0x28d/0xa20 [ 119.854897][ T3500] notifier_call_chain+0x197/0x390 [ 119.860756][ T3500] unregister_netdevice_many_notify+0xf36/0x1810 [ 119.867822][ T3500] unregister_netdevice_queue+0x324/0x360 [ 119.874177][ T3500] _cfg80211_unregister_wdev+0x16b/0x580 [ 119.880457][ T3500] ieee80211_remove_interfaces+0x496/0x680 [ 119.886991][ T3500] ieee80211_unregister_hw+0x5d/0x2a0 [ 119.892893][ T3500] mac80211_hwsim_del_radio+0x274/0x450 [ 119.899067][ T3500] hwsim_exit_net+0x585/0x640 [ 119.904385][ T3500] cleanup_net+0x6f4/0xb90 [ 119.909347][ T3500] process_scheduled_works+0xa45/0x15b0 [ 119.915524][ T3500] worker_thread+0xa55/0xfc0 [ 119.920912][ T3500] kthread+0x2fa/0x390 [ 119.926661][ T3500] ret_from_fork+0x48/0x80 [ 119.931714][ T3500] ret_from_fork_asm+0x11/0x20 [ 119.937640][ T3500] [ 119.937640][ T3500] other info that might help us debug this: [ 119.937640][ T3500] [ 119.949939][ T3500] Possible unsafe locking scenario: [ 119.949939][ T3500] [ 119.958458][ T3500] CPU0 CPU1 [ 119.963924][ T3500] ---- ---- [ 119.969586][ T3500] lock(&rdev->wiphy.mtx); [ 119.974487][ T3500] lock(team->team_lock_key#2); [ 119.983186][ T3500] lock(&rdev->wiphy.mtx); [ 119.990581][ T3500] lock(team->team_lock_key#2); [ 119.995633][ T3500] [ 119.995633][ T3500] *** DEADLOCK *** [ 119.995633][ T3500] [ 120.004140][ T3500] 5 locks held by kworker/u4:11/3500: [ 120.009603][ T3500] #0: ffff888017873938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 120.020860][ T3500] #1: ffffc9000cff7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 120.031697][ T3500] #2: ffffffff8dfae390 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x136/0xb90 [ 120.041623][ T3500] #3: ffffffff8dfbb188 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0 [ 120.052094][ T3500] #4: ffff8880781c0768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x292/0x680 [ 120.063282][ T3500] [ 120.063282][ T3500] stack backtrace: [ 120.069200][ T3500] CPU: 0 PID: 3500 Comm: kworker/u4:11 Not tainted 6.6.100-syzkaller #0 [ 120.077549][ T3500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 120.087803][ T3500] Workqueue: netns cleanup_net [ 120.091429][ T5863] Bluetooth: hci1: command tx timeout [ 120.092856][ T3500] Call Trace: [ 120.102647][ T3500] [ 120.105743][ T3500] dump_stack_lvl+0x16c/0x230 [ 120.110468][ T3500] ? load_image+0x3b0/0x3b0 [ 120.115017][ T3500] ? show_regs_print_info+0x20/0x20 [ 120.120330][ T3500] ? print_circular_bug+0x12b/0x1a0 [ 120.125655][ T3500] check_noncircular+0x2bd/0x3c0 [ 120.130795][ T3500] ? print_deadlock_bug+0x5d0/0x5d0 [ 120.136140][ T3500] ? lockdep_lock+0xe0/0x220 [ 120.141131][ T3500] ? __lock_acquire+0x1334/0x7c80 [ 120.146339][ T3500] ? _find_first_zero_bit+0xd3/0x100 [ 120.151848][ T3500] __lock_acquire+0x2ddb/0x7c80 [ 120.157906][ T3500] ? verify_lock_unused+0x140/0x140 [ 120.163816][ T3500] ? verify_lock_unused+0x140/0x140 [ 120.169044][ T3500] lock_acquire+0x197/0x410 [ 120.173589][ T3500] ? team_del_slave+0x32/0x1c0 [ 120.178363][ T3500] ? __might_sleep+0xe0/0xe0 [ 120.183151][ T3500] ? read_lock_is_recursive+0x20/0x20 [ 120.188768][ T3500] __mutex_lock+0x129/0xcc0 [ 120.193560][ T3500] ? team_del_slave+0x32/0x1c0 [ 120.199168][ T3500] ? __lock_acquire+0x7c80/0x7c80 [ 120.204934][ T3500] ? rcu_is_watching+0x15/0xb0 [ 120.209747][ T3500] ? trace_contention_end+0x39/0xe0 [ 120.215057][ T3500] ? __mutex_lock+0x304/0xcc0 [ 120.219873][ T3500] ? team_del_slave+0x32/0x1c0 [ 120.224738][ T3500] ? mutex_lock_nested+0x20/0x20 [ 120.230130][ T3500] ? bond_netdev_event+0xe1/0xef0 [ 120.235356][ T3500] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 120.241544][ T3500] ? bond_ipsec_offload_ok+0x410/0x410 [ 120.247607][ T3500] team_del_slave+0x32/0x1c0 [ 120.252946][ T3500] team_device_event+0x28d/0xa20 [ 120.258340][ T3500] notifier_call_chain+0x197/0x390 [ 120.263574][ T3500] unregister_netdevice_many_notify+0xf36/0x1810 [ 120.270720][ T3500] ? lock_chain_count+0x20/0x20 [ 120.275705][ T3500] ? unregister_netdevice_many+0x20/0x20 [ 120.281893][ T3500] ? kernfs_remove_by_name_ns+0x117/0x150 [ 120.288617][ T3500] ? __lock_acquire+0x7c80/0x7c80 [ 120.293866][ T3500] unregister_netdevice_queue+0x324/0x360 [ 120.300395][ T3500] ? list_netdevice+0x730/0x730 [ 120.305961][ T3500] ? kernfs_remove_by_name_ns+0x117/0x150 [ 120.312457][ T3500] _cfg80211_unregister_wdev+0x16b/0x580 [ 120.318722][ T3500] ieee80211_remove_interfaces+0x496/0x680 [ 120.325025][ T3500] ? ieee80211_do_stop+0x1db0/0x1db0 [ 120.330729][ T3500] ? rcu_is_watching+0x15/0xb0 [ 120.335796][ T3500] ieee80211_unregister_hw+0x5d/0x2a0 [ 120.342621][ T3500] mac80211_hwsim_del_radio+0x274/0x450 [ 120.349623][ T3500] ? rhashtable_remove_fast+0xbf0/0xbf0 [ 120.355721][ T3500] hwsim_exit_net+0x585/0x640 [ 120.362602][ T3500] ? hwsim_init_net+0x90/0x90 [ 120.368177][ T3500] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 120.375928][ T3500] cleanup_net+0x6f4/0xb90 [ 120.380555][ T3500] ? ops_free_list+0x3b0/0x3b0 [ 120.385519][ T3500] ? _raw_spin_unlock_irq+0x23/0x50 [ 120.390756][ T3500] ? process_scheduled_works+0x957/0x15b0 [ 120.396712][ T3500] ? process_scheduled_works+0x957/0x15b0 [ 120.402708][ T3500] process_scheduled_works+0xa45/0x15b0 [ 120.408382][ T3500] ? assign_work+0x400/0x400 [ 120.413004][ T3500] ? assign_work+0x39e/0x400 [ 120.417630][ T3500] worker_thread+0xa55/0xfc0 [ 120.422273][ T3500] kthread+0x2fa/0x390 [ 120.426854][ T3500] ? pr_cont_work+0x560/0x560 [ 120.431725][ T3500] ? kthread_blkcg+0xd0/0xd0 [ 120.436681][ T3500] ret_from_fork+0x48/0x80 [ 120.441261][ T3500] ? kthread_blkcg+0xd0/0xd0 [ 120.446027][ T3500] ret_from_fork_asm+0x11/0x20 [ 120.451047][ T3500] [ 120.459697][ T3500] team0: Port device wlan1 removed [ 120.521452][ T6547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.558469][ T6547] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.571394][ T3491] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.579347][ T3491] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.608420][ T3500] hsr_slave_0: left promiscuous mode [ 120.614821][ T3500] hsr_slave_1: left promiscuous mode [ 120.623211][ T3500] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.632289][ T3500] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.640346][ T3500] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.648678][ T3500] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.656663][ T3500] bridge_slave_1: left allmulticast mode [ 120.662683][ T3500] bridge_slave_1: left promiscuous mode [ 120.669104][ T3500] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.678322][ T3500] bridge_slave_0: left allmulticast mode [ 120.684346][ T3500] bridge_slave_0: left promiscuous mode [ 120.690099][ T3500] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.702437][ T3500] veth1_macvtap: left promiscuous mode [ 120.708053][ T3500] veth0_macvtap: left promiscuous mode [ 120.714090][ T3500] veth1_vlan: left promiscuous mode [ 120.719603][ T3500] veth0_vlan: left promiscuous mode [ 120.917640][ T3500] team0 (unregistering): Port device team_slave_1 removed [ 120.939707][ T3500] team0 (unregistering): Port device team_slave_0 removed [ 120.966014][ T3500] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.982505][ T3500] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.081352][ T3500] bond0 (unregistering): Released all slaves [ 121.168445][ T3474] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.175964][ T3474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.356482][ T6547] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.403845][ T6547] veth0_vlan: entered promiscuous mode [ 121.419760][ T6547] veth1_vlan: entered promiscuous mode [ 121.449497][ T6547] veth0_macvtap: entered promiscuous mode [ 121.462054][ T6547] veth1_macvtap: entered promiscuous mode [ 121.481840][ T6547] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.495051][ T6547] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.507282][ T6547] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.516844][ T6547] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.526054][ T6547] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.535169][ T6547] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.566918][ T6547] ieee80211 phy7: Selected rate control algorithm 'minstrel_ht' [ 121.589578][ T3491] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.593186][ T6547] ieee80211 phy8: Selected rate control algorithm 'minstrel_ht' [ 121.605543][ T3491] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/07/28 11:31:02 executed programs: 602 [ 121.628595][ T3491] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.636605][ T3491] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.670827][ T6598] validate_nla: 207 callbacks suppressed [ 121.670840][ T6598] netlink: 'syz.0.616': attribute type 10 has an invalid length. [ 121.693902][ T6598] team0: Port device wlan1 added [ 121.717386][ T6599] netlink: 'syz.0.617': attribute type 10 has an invalid length. [ 121.745290][ T6600] netlink: 'syz.0.618': attribute type 10 has an invalid length. [ 121.767133][ T6601] netlink: 'syz.0.619': attribute type 10 has an invalid length. [ 121.786408][ T6602] netlink: 'syz.0.620': attribute type 10 has an invalid length. [ 121.806331][ T6603] netlink: 'syz.0.621': attribute type 10 has an invalid length. [ 121.827084][ T6604] netlink: 'syz.0.622': attribute type 10 has an invalid length. [ 121.848105][ T6605] netlink: 'syz.0.623': attribute type 10 has an invalid length. [ 121.867855][ T6606] netlink: 'syz.0.624': attribute type 10 has an invalid length. [ 121.888749][ T6607] netlink: 'syz.0.625': attribute type 10 has an invalid length. [ 122.143103][ T5863] Bluetooth: hci1: command tx timeout [ 124.221555][ T5863] Bluetooth: hci1: command tx timeout [ 126.301514][ T5863] Bluetooth: hci1: command tx timeout 2025/07/28 11:31:07 executed programs: 885 [ 126.677004][ T6884] validate_nla: 275 callbacks suppressed [ 126.677017][ T6884] netlink: 'syz.0.901': attribute type 10 has an invalid length. [ 126.704669][ T6885] netlink: 'syz.0.902': attribute type 10 has an invalid length. [ 126.724522][ T6886] netlink: 'syz.0.903': attribute type 10 has an invalid length. [ 126.746950][ T6887] netlink: 'syz.0.904': attribute type 10 has an invalid length. [ 126.766302][ T6888] netlink: 'syz.0.905': attribute type 10 has an invalid length. [ 126.785800][ T6889] netlink: 'syz.0.906': attribute type 10 has an invalid length. [ 126.807040][ T6890] netlink: 'syz.0.907': attribute type 10 has an invalid length. [ 126.825800][ T6891] netlink: 'syz.0.908': attribute type 10 has an invalid length. [ 126.844150][ T6892] netlink: 'syz.0.909': attribute type 10 has an invalid length. [ 126.868033][ T6893] netlink: 'syz.0.910': attribute type 10 has an invalid length.