[ 92.174339][ T44] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.0.160' (ED25519) to the list of known hosts. 2025/07/24 09:20:47 ignoring optional flag "sandboxArg"="0" 2025/07/24 09:20:49 parsed 1 programs [ 97.902752][ T5856] cgroup: Unknown subsys name 'net' [ 98.016895][ T5856] cgroup: Unknown subsys name 'cpuset' [ 98.026325][ T5856] cgroup: Unknown subsys name 'rlimit' [ 99.720384][ T5856] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 102.598113][ T5864] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 103.060737][ T5874] chnl_net:caif_netlink_parms(): no params data found [ 103.166368][ T5874] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.175290][ T5874] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.183645][ T5874] bridge_slave_0: entered allmulticast mode [ 103.191065][ T5874] bridge_slave_0: entered promiscuous mode [ 103.201224][ T5874] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.208679][ T5874] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.216636][ T5874] bridge_slave_1: entered allmulticast mode [ 103.224292][ T5874] bridge_slave_1: entered promiscuous mode [ 103.263098][ T5874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.277297][ T5874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.316994][ T5874] team0: Port device team_slave_0 added [ 103.325308][ T5874] team0: Port device team_slave_1 added [ 103.357814][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.365308][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.391816][ T5874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.404850][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.411829][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.438237][ T5874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.488702][ T5874] hsr_slave_0: entered promiscuous mode [ 103.495287][ T5874] hsr_slave_1: entered promiscuous mode [ 103.656516][ T5874] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 103.669115][ T5874] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 103.680699][ T5874] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 103.691972][ T5874] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 103.729570][ T5874] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.736896][ T5874] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.745160][ T5874] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.752312][ T5874] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.813191][ T5874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.837164][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.845852][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.864201][ T5874] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.879372][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.886622][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.900936][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.908176][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.119242][ T5874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.163958][ T5874] veth0_vlan: entered promiscuous mode [ 104.178016][ T5874] veth1_vlan: entered promiscuous mode [ 104.209470][ T5874] veth0_macvtap: entered promiscuous mode [ 104.219027][ T5874] veth1_macvtap: entered promiscuous mode [ 104.239913][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.256013][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.268722][ T5874] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.278158][ T5874] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.288360][ T5874] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.297506][ T5874] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.484284][ T59] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.557249][ T59] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.635554][ T59] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.713693][ T59] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.131535][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 105.141316][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 105.153783][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 105.163658][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 105.171837][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 106.905547][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.918838][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.953189][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.961387][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.108517][ T59] bridge_slave_1: left allmulticast mode [ 107.127344][ T59] bridge_slave_1: left promiscuous mode [ 107.138928][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.165328][ T59] bridge_slave_0: left allmulticast mode [ 107.171075][ T59] bridge_slave_0: left promiscuous mode [ 107.193513][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.753162][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.766261][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.776324][ T59] bond0 (unregistering): Released all slaves [ 107.884524][ T59] hsr_slave_0: left promiscuous mode [ 107.890608][ T59] hsr_slave_1: left promiscuous mode [ 107.897209][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.904789][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.913710][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.921141][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.938692][ T59] veth1_macvtap: left promiscuous mode [ 107.944927][ T59] veth0_macvtap: left promiscuous mode [ 107.950708][ T59] veth1_vlan: left promiscuous mode [ 107.956209][ T59] veth0_vlan: left promiscuous mode [ 108.296071][ T59] team0 (unregistering): Port device team_slave_1 removed [ 108.326367][ T59] team0 (unregistering): Port device team_slave_0 removed 2025/07/24 09:21:04 executed programs: 0 [ 110.016597][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 110.027816][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 110.042646][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 110.051280][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 110.059193][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 110.506838][ T5983] chnl_net:caif_netlink_parms(): no params data found [ 110.699957][ T5983] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.719039][ T5983] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.728836][ T5983] bridge_slave_0: entered allmulticast mode [ 110.738749][ T5983] bridge_slave_0: entered promiscuous mode [ 110.831066][ T5983] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.839529][ T5983] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.848397][ T5983] bridge_slave_1: entered allmulticast mode [ 110.856667][ T5983] bridge_slave_1: entered promiscuous mode [ 110.931061][ T5983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.946821][ T5983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.028936][ T5983] team0: Port device team_slave_0 added [ 111.038534][ T5983] team0: Port device team_slave_1 added [ 111.088674][ T5983] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.096027][ T5983] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.122193][ T5983] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.138231][ T5983] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.145330][ T5983] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.172795][ T5983] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.281411][ T5983] hsr_slave_0: entered promiscuous mode [ 111.289790][ T5983] hsr_slave_1: entered promiscuous mode [ 111.985350][ T5983] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 111.999740][ T5983] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 112.014665][ T5983] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 112.028734][ T5983] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 112.093320][ T51] Bluetooth: hci0: command tx timeout [ 112.145786][ T5983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.178331][ T5983] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.192375][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.199678][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.216179][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.223489][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.526614][ T5983] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.599030][ T5983] veth0_vlan: entered promiscuous mode [ 112.616498][ T5983] veth1_vlan: entered promiscuous mode [ 112.661345][ T5983] veth0_macvtap: entered promiscuous mode [ 112.674580][ T5983] veth1_macvtap: entered promiscuous mode [ 112.704758][ T5983] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.725298][ T5983] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.747171][ T5983] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.758318][ T5983] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.769870][ T5983] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.779085][ T5983] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.881963][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.901125][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.940208][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.949583][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.017481][ T6055] netlink: 'syz.0.16': attribute type 10 has an invalid length. [ 113.071638][ T6055] team0: Port device wlan1 added [ 113.129447][ T6057] netlink: 'syz.0.17': attribute type 10 has an invalid length. [ 113.183120][ T6059] netlink: 'syz.0.18': attribute type 10 has an invalid length. [ 113.244676][ T6060] netlink: 'syz.0.19': attribute type 10 has an invalid length. [ 113.298555][ T6062] netlink: 'syz.0.20': attribute type 10 has an invalid length. [ 113.359049][ T6066] netlink: 'syz.0.21': attribute type 10 has an invalid length. [ 113.428643][ T6067] netlink: 'syz.0.22': attribute type 10 has an invalid length. [ 113.467186][ T6070] netlink: 'syz.0.23': attribute type 10 has an invalid length. [ 113.531183][ T6071] netlink: 'syz.0.24': attribute type 10 has an invalid length. [ 113.579654][ T6075] netlink: 'syz.0.25': attribute type 10 has an invalid length. [ 114.172802][ T51] Bluetooth: hci0: command tx timeout 2025/07/24 09:21:09 executed programs: 43 [ 116.255007][ T51] Bluetooth: hci0: command tx timeout [ 118.051651][ T6270] validate_nla: 151 callbacks suppressed [ 118.051667][ T6270] netlink: 'syz.0.177': attribute type 10 has an invalid length. [ 118.079010][ T6271] netlink: 'syz.0.178': attribute type 10 has an invalid length. [ 118.104335][ T6272] netlink: 'syz.0.179': attribute type 10 has an invalid length. [ 118.130021][ T6273] netlink: 'syz.0.180': attribute type 10 has an invalid length. [ 118.153756][ T6274] netlink: 'syz.0.181': attribute type 10 has an invalid length. [ 118.180014][ T6275] netlink: 'syz.0.182': attribute type 10 has an invalid length. [ 118.205199][ T6276] netlink: 'syz.0.183': attribute type 10 has an invalid length. [ 118.226448][ T6277] netlink: 'syz.0.184': attribute type 10 has an invalid length. [ 118.248131][ T6278] netlink: 'syz.0.185': attribute type 10 has an invalid length. [ 118.274634][ T6279] netlink: 'syz.0.186': attribute type 10 has an invalid length. [ 118.333369][ T51] Bluetooth: hci0: command tx timeout 2025/07/24 09:21:14 executed programs: 257 [ 123.061197][ T6520] validate_nla: 238 callbacks suppressed [ 123.061229][ T6520] netlink: 'syz.0.425': attribute type 10 has an invalid length. [ 123.100576][ T6522] netlink: 'syz.0.426': attribute type 10 has an invalid length. [ 123.124205][ T6523] netlink: 'syz.0.427': attribute type 10 has an invalid length. [ 123.149283][ T6524] netlink: 'syz.0.428': attribute type 10 has an invalid length. [ 123.174649][ T6525] netlink: 'syz.0.429': attribute type 10 has an invalid length. [ 123.196315][ T6526] netlink: 'syz.0.430': attribute type 10 has an invalid length. [ 123.217879][ T6527] netlink: 'syz.0.431': attribute type 10 has an invalid length. [ 123.243380][ T6528] netlink: 'syz.0.432': attribute type 10 has an invalid length. [ 123.267697][ T6529] netlink: 'syz.0.433': attribute type 10 has an invalid length. [ 123.289802][ T6530] netlink: 'syz.0.434': attribute type 10 has an invalid length. 2025/07/24 09:21:19 executed programs: 506 [ 126.997125][ T5165] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 127.016548][ T5165] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 127.029633][ T5165] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 127.039139][ T5165] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 127.048473][ T5165] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 127.199689][ T1149] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.270420][ T1149] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.285269][ T6718] chnl_net:caif_netlink_parms(): no params data found [ 127.338256][ T1149] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.405801][ T1149] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.420720][ T6718] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.428920][ T6718] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.436548][ T6718] bridge_slave_0: entered allmulticast mode [ 127.446817][ T6718] bridge_slave_0: entered promiscuous mode [ 127.455679][ T6718] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.463503][ T6718] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.471073][ T6718] bridge_slave_1: entered allmulticast mode [ 127.478752][ T6718] bridge_slave_1: entered promiscuous mode [ 127.522534][ T6718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.535653][ T6718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.627692][ T6718] team0: Port device team_slave_0 added [ 127.654863][ T6718] team0: Port device team_slave_1 added [ 127.688230][ T1149] bridge_slave_1: left allmulticast mode [ 127.694117][ T1149] bridge_slave_1: left promiscuous mode [ 127.699882][ T1149] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.709716][ T1149] bridge_slave_0: left allmulticast mode [ 127.715784][ T1149] bridge_slave_0: left promiscuous mode [ 127.722135][ T1149] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.989624][ T1149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.001210][ T1149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.011467][ T1149] bond0 (unregistering): Released all slaves [ 128.026144][ T6718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.033428][ T6718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.061778][ T6718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.077882][ T6718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.085453][ T6718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.112149][ T6718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 128.149459][ T1149] [ 128.151834][ T1149] ====================================================== [ 128.158873][ T1149] WARNING: possible circular locking dependency detected [ 128.166263][ T1149] 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 Not tainted [ 128.173373][ T1149] ------------------------------------------------------ [ 128.180405][ T1149] kworker/u8:6/1149 is trying to acquire lock: [ 128.186658][ T1149] ffff88802d6b8e00 (team->team_lock_key){+.+.}-{4:4}, at: team_del_slave+0x32/0x1c0 [ 128.196119][ T1149] [ 128.196119][ T1149] but task is already holding lock: [ 128.203498][ T1149] ffff88807d3d8768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0 [ 128.213969][ T1149] [ 128.213969][ T1149] which lock already depends on the new lock. [ 128.213969][ T1149] [ 128.224562][ T1149] [ 128.224562][ T1149] the existing dependency chain (in reverse order) is: [ 128.234134][ T1149] [ 128.234134][ T1149] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 128.241915][ T1149] lock_acquire+0x120/0x360 [ 128.246957][ T1149] __mutex_lock+0x182/0xe80 [ 128.252006][ T1149] ieee80211_open+0xed/0x1f0 [ 128.257241][ T1149] __dev_open+0x470/0x880 [ 128.262110][ T1149] netif_open+0xaa/0x170 [ 128.266906][ T1149] dev_open+0x125/0x260 [ 128.271612][ T1149] team_add_slave+0xb36/0x2840 [ 128.276917][ T1149] do_set_master+0x530/0x6d0 [ 128.282055][ T1149] do_setlink+0xcf0/0x41c0 [ 128.287025][ T1149] rtnl_newlink+0x160b/0x1c70 [ 128.292422][ T1149] rtnetlink_rcv_msg+0x7cc/0xb70 [ 128.297894][ T1149] netlink_rcv_skb+0x205/0x470 [ 128.303201][ T1149] netlink_unicast+0x759/0x8e0 [ 128.308592][ T1149] netlink_sendmsg+0x805/0xb30 [ 128.314185][ T1149] __sock_sendmsg+0x219/0x270 [ 128.319400][ T1149] ____sys_sendmsg+0x505/0x830 [ 128.324695][ T1149] ___sys_sendmsg+0x21f/0x2a0 [ 128.329993][ T1149] __x64_sys_sendmsg+0x19b/0x260 [ 128.335457][ T1149] do_syscall_64+0xfa/0x3b0 [ 128.340522][ T1149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.346956][ T1149] [ 128.346956][ T1149] -> #0 (team->team_lock_key){+.+.}-{4:4}: [ 128.355059][ T1149] validate_chain+0xb9b/0x2140 [ 128.360541][ T1149] __lock_acquire+0xab9/0xd20 [ 128.365752][ T1149] lock_acquire+0x120/0x360 [ 128.370877][ T1149] __mutex_lock+0x182/0xe80 [ 128.375932][ T1149] team_del_slave+0x32/0x1c0 [ 128.381259][ T1149] team_device_event+0x285/0xa20 [ 128.386795][ T1149] notifier_call_chain+0x1b3/0x3e0 [ 128.392820][ T1149] unregister_netdevice_many_notify+0x15d8/0x2320 [ 128.399925][ T1149] unregister_netdevice_queue+0x33c/0x380 [ 128.406492][ T1149] _cfg80211_unregister_wdev+0x165/0x590 [ 128.412686][ T1149] ieee80211_remove_interfaces+0x49a/0x6d0 [ 128.419145][ T1149] ieee80211_unregister_hw+0x5d/0x2c0 [ 128.425063][ T1149] mac80211_hwsim_del_radio+0x275/0x460 [ 128.431181][ T1149] hwsim_exit_net+0x584/0x640 [ 128.436403][ T1149] ops_undo_list+0x497/0x990 [ 128.441582][ T1149] cleanup_net+0x4c5/0x800 [ 128.446562][ T1149] process_scheduled_works+0xae1/0x17b0 [ 128.452649][ T1149] worker_thread+0x8a0/0xda0 [ 128.457780][ T1149] kthread+0x70e/0x8a0 [ 128.462410][ T1149] ret_from_fork+0x3fc/0x770 [ 128.467772][ T1149] ret_from_fork_asm+0x1a/0x30 [ 128.473148][ T1149] [ 128.473148][ T1149] other info that might help us debug this: [ 128.473148][ T1149] [ 128.484109][ T1149] Possible unsafe locking scenario: [ 128.484109][ T1149] [ 128.491684][ T1149] CPU0 CPU1 [ 128.497346][ T1149] ---- ---- [ 128.503215][ T1149] lock(&rdev->wiphy.mtx); [ 128.507761][ T1149] lock(team->team_lock_key); [ 128.515164][ T1149] lock(&rdev->wiphy.mtx); [ 128.522237][ T1149] lock(team->team_lock_key); [ 128.527044][ T1149] [ 128.527044][ T1149] *** DEADLOCK *** [ 128.527044][ T1149] [ 128.535430][ T1149] 5 locks held by kworker/u8:6/1149: [ 128.540839][ T1149] #0: ffff88801b2fe148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 128.551788][ T1149] #1: ffffc90003e2fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 128.562476][ T1149] #2: ffffffff8f50f510 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 128.572060][ T1149] #3: ffffffff8f51c108 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_unregister_hw+0x55/0x2c0 [ 128.582066][ T1149] #4: ffff88807d3d8768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0 [ 128.592988][ T1149] [ 128.592988][ T1149] stack backtrace: [ 128.599198][ T1149] CPU: 1 UID: 0 PID: 1149 Comm: kworker/u8:6 Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(full) [ 128.599223][ T1149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 128.599237][ T1149] Workqueue: netns cleanup_net [ 128.599276][ T1149] Call Trace: [ 128.599287][ T1149] [ 128.599296][ T1149] dump_stack_lvl+0x189/0x250 [ 128.599323][ T1149] ? __pfx_dump_stack_lvl+0x10/0x10 [ 128.599344][ T1149] ? __pfx__printk+0x10/0x10 [ 128.599369][ T1149] ? print_lock_name+0xde/0x100 [ 128.599394][ T1149] print_circular_bug+0x2ee/0x310 [ 128.599419][ T1149] check_noncircular+0x134/0x160 [ 128.599445][ T1149] validate_chain+0xb9b/0x2140 [ 128.599471][ T1149] ? lockdep_hardirqs_on+0x9c/0x150 [ 128.599496][ T1149] __lock_acquire+0xab9/0xd20 [ 128.599516][ T1149] ? team_del_slave+0x32/0x1c0 [ 128.599540][ T1149] lock_acquire+0x120/0x360 [ 128.599557][ T1149] ? team_del_slave+0x32/0x1c0 [ 128.599583][ T1149] ? __mutex_trylock_common+0x153/0x260 [ 128.599608][ T1149] __mutex_lock+0x182/0xe80 [ 128.599629][ T1149] ? team_del_slave+0x32/0x1c0 [ 128.599653][ T1149] ? rcu_is_watching+0x15/0xb0 [ 128.599685][ T1149] ? team_del_slave+0x32/0x1c0 [ 128.599709][ T1149] ? __pfx___mutex_lock+0x10/0x10 [ 128.599730][ T1149] ? bond_netdev_event+0xd9/0xe80 [ 128.599758][ T1149] ? __pfx___mutex_lock+0x10/0x10 [ 128.599778][ T1149] ? __pfx_bond_netdev_event+0x10/0x10 [ 128.599808][ T1149] team_del_slave+0x32/0x1c0 [ 128.599834][ T1149] team_device_event+0x285/0xa20 [ 128.599853][ T1149] notifier_call_chain+0x1b3/0x3e0 [ 128.599878][ T1149] unregister_netdevice_many_notify+0x15d8/0x2320 [ 128.599907][ T1149] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 128.599930][ T1149] ? __lock_acquire+0xab9/0xd20 [ 128.599963][ T1149] unregister_netdevice_queue+0x33c/0x380 [ 128.599983][ T1149] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 128.600007][ T1149] _cfg80211_unregister_wdev+0x165/0x590 [ 128.600036][ T1149] ieee80211_remove_interfaces+0x49a/0x6d0 [ 128.600060][ T1149] ? __pfx_synchronize_rcu+0x10/0x10 [ 128.600083][ T1149] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 128.600105][ T1149] ? rcu_is_watching+0x15/0xb0 [ 128.600128][ T1149] ieee80211_unregister_hw+0x5d/0x2c0 [ 128.600147][ T1149] mac80211_hwsim_del_radio+0x275/0x460 [ 128.600177][ T1149] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 128.600211][ T1149] hwsim_exit_net+0x584/0x640 [ 128.600235][ T1149] ? __pfx_hwsim_exit_net+0x10/0x10 [ 128.600259][ T1149] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 128.600288][ T1149] ops_undo_list+0x497/0x990 [ 128.600315][ T1149] ? __pfx_ops_undo_list+0x10/0x10 [ 128.600345][ T1149] cleanup_net+0x4c5/0x800 [ 128.600370][ T1149] ? __pfx_cleanup_net+0x10/0x10 [ 128.600396][ T1149] ? _raw_spin_unlock_irq+0x23/0x50 [ 128.600412][ T1149] ? process_scheduled_works+0x9ef/0x17b0 [ 128.600432][ T1149] ? process_scheduled_works+0x9ef/0x17b0 [ 128.600452][ T1149] process_scheduled_works+0xae1/0x17b0 [ 128.600484][ T1149] ? __pfx_process_scheduled_works+0x10/0x10 [ 128.600511][ T1149] worker_thread+0x8a0/0xda0 [ 128.600533][ T1149] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 128.600553][ T1149] ? __kthread_parkme+0x7b/0x200 [ 128.600579][ T1149] kthread+0x70e/0x8a0 [ 128.600604][ T1149] ? __pfx_worker_thread+0x10/0x10 [ 128.600624][ T1149] ? __pfx_kthread+0x10/0x10 [ 128.600649][ T1149] ? _raw_spin_unlock_irq+0x23/0x50 [ 128.600665][ T1149] ? lockdep_hardirqs_on+0x9c/0x150 [ 128.600683][ T1149] ? __pfx_kthread+0x10/0x10 [ 128.600707][ T1149] ret_from_fork+0x3fc/0x770 [ 128.600727][ T1149] ? __pfx_ret_from_fork+0x10/0x10 [ 128.600747][ T1149] ? __switch_to_asm+0x39/0x70 [ 128.600770][ T1149] ? __switch_to_asm+0x33/0x70 [ 128.600792][ T1149] ? __pfx_kthread+0x10/0x10 [ 128.600816][ T1149] ret_from_fork_asm+0x1a/0x30 [ 128.600846][ T1149] [ 128.977485][ T1149] team0: Port device wlan1 removed [ 129.007227][ T6718] hsr_slave_0: entered promiscuous mode [ 129.013611][ T6718] hsr_slave_1: entered promiscuous mode [ 129.019903][ T6718] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 129.028614][ T6718] Cannot create hsr debugfs directory [ 129.113526][ T1149] hsr_slave_0: left promiscuous mode [ 129.119489][ T1149] hsr_slave_1: left promiscuous mode [ 129.127642][ T1149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.135398][ T51] Bluetooth: hci0: command tx timeout [ 129.139946][ T1149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.149097][ T1149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.160330][ T1149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.173330][ T1149] veth1_macvtap: left promiscuous mode [ 129.178923][ T1149] veth0_macvtap: left promiscuous mode [ 129.184665][ T1149] veth1_vlan: left promiscuous mode [ 129.190001][ T1149] veth0_vlan: left promiscuous mode [ 129.392132][ T1149] team0 (unregistering): Port device team_slave_1 removed [ 129.425958][ T1149] team0 (unregistering): Port device team_slave_0 removed [ 129.930071][ T6718] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 129.940822][ T6718] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 129.957479][ T6718] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 129.968007][ T6718] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 130.047213][ T6718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.065777][ T6718] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.077331][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.084502][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.097401][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.104886][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.300260][ T6718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.345286][ T6718] veth0_vlan: entered promiscuous mode [ 130.357969][ T6718] veth1_vlan: entered promiscuous mode [ 130.385185][ T6718] veth0_macvtap: entered promiscuous mode [ 130.395203][ T6718] veth1_macvtap: entered promiscuous mode [ 130.416674][ T6718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.431083][ T6718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.446505][ T6718] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.457114][ T6718] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.467055][ T6718] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.476529][ T6718] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.517334][ T6718] ieee80211 phy7: Selected rate control algorithm 'minstrel_ht' [ 130.546254][ T6718] ieee80211 phy8: Selected rate control algorithm 'minstrel_ht' [ 130.555209][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.564924][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.589103][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.598963][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/07/24 09:21:25 executed programs: 602 [ 130.664376][ T6789] validate_nla: 181 callbacks suppressed [ 130.664397][ T6789] netlink: 'syz.0.616': attribute type 10 has an invalid length. [ 130.691117][ T6789] team0: Port device wlan1 added [ 130.713102][ T6791] netlink: 'syz.0.617': attribute type 10 has an invalid length. [ 130.739582][ T6793] netlink: 'syz.0.618': attribute type 10 has an invalid length. [ 130.761511][ T6794] netlink: 'syz.0.619': attribute type 10 has an invalid length. [ 130.784858][ T6796] netlink: 'syz.0.620': attribute type 10 has an invalid length. [ 130.816555][ T6798] netlink: 'syz.0.621': attribute type 10 has an invalid length. [ 130.840696][ T6799] netlink: 'syz.0.622': attribute type 10 has an invalid length. [ 130.864963][ T6801] netlink: 'syz.0.623': attribute type 10 has an invalid length. [ 130.889606][ T6802] netlink: 'syz.0.624': attribute type 10 has an invalid length. [ 130.915452][ T6805] netlink: 'syz.0.625': attribute type 10 has an invalid length. [ 131.214369][ T51] Bluetooth: hci0: command tx timeout [ 133.135355][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.141694][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.292540][ T51] Bluetooth: hci0: command tx timeout [ 135.373108][ T51] Bluetooth: hci0: command tx timeout 2025/07/24 09:21:30 executed programs: 886 [ 135.698110][ T7092] validate_nla: 276 callbacks suppressed [ 135.698125][ T7092] netlink: 'syz.0.902': attribute type 10 has an invalid length. [ 135.723699][ T7093] netlink: 'syz.0.903': attribute type 10 has an invalid length. [ 135.741778][ T7094] netlink: 'syz.0.904': attribute type 10 has an invalid length. [ 135.768333][ T7095] netlink: 'syz.0.905': attribute type 10 has an invalid length. [ 135.786974][ T7096] netlink: 'syz.0.906': attribute type 10 has an invalid length. [ 135.804186][ T7097] netlink: 'syz.0.907': attribute type 10 has an invalid length. [ 135.827806][ T7098] netlink: 'syz.0.908': attribute type 10 has an invalid length. [ 135.845502][ T7099] netlink: 'syz.0.909': attribute type 10 has an invalid length. [ 135.865379][ T7100] netlink: 'syz.0.910': attribute type 10 has an invalid length. [ 135.887779][ T7101] netlink: 'syz.0.911': attribute type 10 has an invalid length.